Read the docs

learnhouse

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

learnhouse records in CISA KEV

No learnhouse vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Learnhouse 4 records MEDIUM

Records

6 records

TI-2025-11259 CVE-2025-12276 · GHSA-w73x-3cc6-jch7

LearnHouse Image information disclosure

Priority MEDIUM 57

A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00409 Published 2025-10-27 No fix listed CWE-200
TI-2025-11251 CVE-2025-12268 · GHSA-c7xv-ccqv-hh5v

LearnHouse Course Thumbnail courses unrestricted upload

Priority MEDIUM 57

A vulnerability has been found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00415 Published 2025-10-27 No fix listed CWE-284
TI-2026-83549 CVE-2026-120199 · GHSA-3gfx-j948-6jm4

Missing authorization in LearnHouse assignment submissions API

Priority LOW 23

LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00218 Published 2026-10-31 Fixed in 1.1.1 CWE-639
TI-2026-71294 CVE-2026-109564 · GHSA-gcg2-9m45-j9r6

Missing authorization lets users copy restricted LearnHouse playgrounds

Priority LOW 11

LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-access and draft checks enforced by get_playground.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-12 Fixed in 1.4.0 CWE-862
Open these records in search →