PT-2023-28593
CVE-2023-42807
·
Publicado
2023-09-21
·
Atualizado
2025-10-03
Descrição por
CVSS 3.1
6.3
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Frappe LMS versions 1.0.0 and prior
Description
Frappe LMS is an open source learning management system. The issue is related to an SQL Injection vulnerability on the People Page of LMS. The vulnerability has been fixed in the
main branch.Recommendations
For versions 1.0.0 and prior, update to the latest
main branch to resolve the issue. As a temporary workaround, consider restricting access to the People Page of LMS until the update is applied.Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾