CyberSecBulletin

LearnHouse vulnerabilities

We track 3 vulnerabilities in LearnHouse products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2025.

3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score

Latest LearnHouse vulnerabilities

  • 7.5 High severity

    LearnHouse: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2025-12276LearnHouse

    A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation results in information disclosure. The attack can be executed remot

  • 7.5 High severity

    LearnHouse: Authorization Bypass Through User-Controlled Key

    CVE-2025-12270LearnHouse

    A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an unknown function of the file /api/v1/assignments/{assignment_id}/tasks/{task_id}/sub_file of the component Student Assignment Submission Han

  • 9.8 Critical severity

    LearnHouse: Unrestricted Upload of File with Dangerous Type

    CVE-2025-12268LearnHouse

    A vulnerability has been found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Impacted is an unknown function of the file /api/v1/courses/ of the component Course Thumbnail Handler. The manipulation of the argument thumbnail leads to unrestricte