VULNERABILITY INTELLIGENCE

CVE-2025-64705

CVSS score4.3 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-11-12
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to access the submissions made by other students The issue has been fixed in version 2.41.0 by ensuring proper roles and redirecting if accessed via direct URL.

Weakness classification

  • security-advisories@github.com: CWE-200
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references