CVE-2025-62778 LOW

CVE-2025-62778: Frappe Learning allowed students to access the Quiz Form via direct URL

Vendor Frappe

Product lms

Weakness CWE-425 · Forced browsing

Published October 27, 2025

Last update October 28, 2025

View on NVD All CVEs

CVSS base score

1.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

What the vulnerability does

01Description

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.

Key dates

02Disclosure timeline

October 27, 2025 CVE published

October 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-62778 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/425.html