Beveiligingsadvies

CVE-2026-39385

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 16:55:08

Laatst bijgewerkt 2026-07-20 19:07:17

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course.

← Alle CVE's bekijken Bekijk op cve.org ↗