Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: learnhouse Clear all filters
TI-2026-83549 CVE-2026-120199 · GHSA-3gfx-j948-6jm4

Missing authorization in LearnHouse assignment submissions API

Priority LOW 23

LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00218 Published 2026-10-31 Fixed in 1.1.1 CWE-639
TI-2026-71294 CVE-2026-109564 · GHSA-gcg2-9m45-j9r6

Missing authorization lets users copy restricted LearnHouse playgrounds

Priority LOW 11

LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-access and draft checks enforced by get_playground.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-12 Fixed in 1.4.0 CWE-862
TI-2025-11259 CVE-2025-12276 · GHSA-w73x-3cc6-jch7

LearnHouse Image information disclosure

Priority MEDIUM 57

A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00409 Published 2025-10-27 No fix listed CWE-200
TI-2025-11251 CVE-2025-12268 · GHSA-c7xv-ccqv-hh5v

LearnHouse Course Thumbnail courses unrestricted upload

Priority MEDIUM 57

A vulnerability has been found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00415 Published 2025-10-27 No fix listed CWE-284