Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handled by SCORMRenderer.render in lms/page_renderers.py. The renderer constructs and opens a server-side path without first confirming that its real path remains within public/scorm, allowing files outside the SCORM directory to be read when they are accessible to the server process. This issue is fixed in version 2.52.1.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Frappe |
|
No data.
No data.
References
History
Fri, 18 Sep 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 18 Sep 2026 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Frappe
Frappe lms |
|
| Vendors & Products |
Frappe
Frappe lms |
Thu, 17 Sep 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handled by SCORMRenderer.render in lms/page_renderers.py. The renderer constructs and opens a server-side path without first confirming that its real path remains within public/scorm, allowing files outside the SCORM directory to be read when they are accessible to the server process. This issue is fixed in version 2.52.1. | |
| Title | Frappe LMS: Path Traversal in SCORM File Serving | |
| Weaknesses | CWE-22 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2026-09-17T21:35:53.629Z
Updated: 2026-09-18T20:14:49.268Z
Reserved: 2026-06-12T19:23:22.317Z
Link: CVE-2026-54343
Vulnrichment
Updated: 2026-09-18T20:14:46.082Z
NVD
Status : Awaiting Analysis
Published: 2026-09-17T22:17:00.390
Modified: 2026-09-23T18:12:04.247
Link: CVE-2026-54343
Redhat
No data.