LearnHouse security vulnerabilities

LearnHouse is an online learning management system open-sourced by LearnHouse. LearnHouse has a security vulnerability that stems from an insufficient restriction of the parameter thumbnail in the component Course Thumbnail Handler in files/api/v1/courses/, which could lead to arbitrary file...

LearnHouse Access Control Vulnerability

LearnHouse is an online learning management system open-sourced by LearnHouse. LearnHouse has an access control error vulnerability that stems from an information disclosure issue in the component Image Handler...

PT-2025-43939

Name of the Vulnerable Software and Affected Versions LearnHouse affected versions not specified Description A flaw exists that results in improper control of resource identifiers. This issue is located within the Student Assignment Submission Handler component, specifically affecting an unknown...

CVE-2025-12276: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation results in information disclosure. The attack can be executed remotely. The exploit is now public and ma...

CVE-2025-12270: Improper Control of Resource Identifiers

A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an unknown function of the file /api/v1/assignments/assignmentid/tasks/taskid/subfile of the component Student Assignment Submission Handler. This manipulation causes improper...

CVE-2025-12268: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Impacted is an unknown function of the file /api/v1/courses/ of the component Course Thumbnail Handler. The manipulation of the argument thumbnail leads to unrestricted upload. It is possible to initiate...