Lucene search
K

6 matches found

NVD
NVD
added 2025/10/10 8:15 p.m.5 views

CVE-2025-62158

Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their assignments as public files. This issue potentially exposed student-uploaded files to the public. Anyone with the fil...

6.9CVSS0.00272EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/10 8:5 p.m.4 views

CVE-2025-62158 Frappe had attachments made by students to their assignments of type Text set to public

Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their assignments as public files. This issue potentially exposed student-uploaded files to the public. Anyone with the fil...

6.9CVSS6.3AI score0.00272EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/10 8:5 p.m.8 views

CVE-2025-62158 Frappe had attachments made by students to their assignments of type Text set to public

Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their assignments as public files. This issue potentially exposed student-uploaded files to the public. Anyone with the fil...

6.9CVSS0.00272EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/10 8:5 p.m.2 views

EUVD-2025-33775

Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their assignments as public files. This issue potentially exposed student-uploaded files to the public. Anyone with the fil...

6.9CVSS6.2AI score0.00272EPSS
Exploits0References2
CVE
CVE
added 2025/10/10 8:5 p.m.16 views

CVE-2025-62158

Summary: Frappe Learning prior to version 2.38.0 stored student assignment attachments as public files, enabling unauthenticated access via file URLs. The underlying issue is the exposure of uploaded files through public storage. Affected products/versions: Frappe Learning,

6.9CVSS6.3AI score0.00272EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.3 views

PT-2025-41602

Name of the Vulnerable Software and Affected Versions Frappe Learning versions prior to 2.38.0 Description Frappe Learning is a learning system used to structure content. Prior to version 2.38.0, student-uploaded assignment attachments were stored as public files, potentially exposing them to...

6.9CVSS6.5AI score0.00272EPSS
Exploits0References6
Rows per page
Query Builder