CVE-2026-26977
Frappe Learning Management System exposes details of unpublished courses to unauthorized users
Résumé
Frappe Learning Management System exposes details of unpublished courses to unauthorized users
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov