Vulnerabilidades do Siemvk Openlearn

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Siemvk Openlearn: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:siemvk:openlearn

CVE-2026-41243 Média · 5.4 CWE-284 22/04/2026

OpenLearn's pending forum posts remain publicly readable by direct ID when moderation mode is enabled

OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `safeMode` is enabled, unapproved forum posts are hidden from the public list, but the direct post-read procedure still returns the full post to anyone with the post UUID. Commit 844b2a40a69d0c4911580fe501923f0b391313ab fixes the issue.