CNNVD-202510-3576 Information
CNNVD ID
CNNVD-202510-3576
Related CVE
- CNNVD Published: 2025-10-27
Description (Chinese)
LearnHouse是LearnHouse开源的一个在线学习管理系统。 LearnHouse 98dfad76aad70711a8113f6c1fdabfccf10509ca及之前版本存在安全漏洞,该漏洞源于文件/api/v1/assignments/{assignment_id}/tasks/{task_id}/sub_file中资源标识符控制不当,可能导致远程攻击。
Description (English)
Learn House is an online learning management system that is an open source for Learn House. LearnHouse 98dfad76aad7011a813f6c1fdabccf10509ca and previous versions contain security loopholes stemming from inappropriate control of resource identifiers in document/api/v1/assignments/{assignment id}/tasks/{task id}/sub file, which may lead to a remote attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
LearnHouse
Published
2025-10-27
Last Modified
2026-02-24
References
https://gist.github.com/KhanMarshaI/f71f86fbd5d8e8363f9113a8c054c28b https://vuldb.com/?ctiid.329942 https://vuldb.com/?id.329942 https://vuldb.com/?submit.674147
Share on: