CVE-2026-26977
Frappe Learning Management System exposes details of unpublished courses to unauthorized users
概要
Frappe Learning Management System exposes details of unpublished courses to unauthorized users
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov