PT-2023-28593
CVE-2023-42807
·
Published
2023-09-21
·
Updated
2025-10-03
Description by
CVSS 3.1
6.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Frappe LMS versions 1.0.0 and prior
Description
Frappe LMS is an open source learning management system. The issue is related to an SQL Injection vulnerability on the People Page of LMS. The vulnerability has been fixed in the
main branch.Recommendations
For versions 1.0.0 and prior, update to the latest
main branch to resolve the issue. As a temporary workaround, consider restricting access to the People Page of LMS until the update is applied.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾