Vendors / oppia Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now oppia records in CISA KEV No oppia vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 57
Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, allowing any registered user to enumerate privileged accounts and roles.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00342 · Published 2026-09-03 · No fix listed CWE-862
Priority MEDIUM 57
Oppia is an online learning platform.
CVSS 3.1 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00774 · Published 2023-08-16 · Fixed in 3.3.2-hotfix-2 CWE-203
Priority LOW 29
Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00742 · Published 2021-11-08 · No fix listed CWE-601
Open these records in search → All records by CVSS severity
0 0 3 0 0
