VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Nov 12, 2025· Updated Jun 17, 2026

CVE-2025-64705

CVE-2025-64705

Description

Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to access the submissions made by other students The issue has been fixed in version 2.41.0 by ensuring proper roles and redirecting if accessed via direct URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Frappe/Learning
    cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*
    Range: >=2.0.0,<2.41.0
  • Frappe/Lmsllm-fuzzy2 versions
    >=2.0.0,<2.41.0+ 1 more
    • (no CPE)range: >=2.0.0,<2.41.0
    • (no CPE)range: >= 2.0.0, < 2.41.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.