CVE-2025-12270: LearnHouse Student Assignment Submission sub_file resource injection
A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an unknown function of the file /api/v1/assignments/{assignmentid}/tasks/{taskid}/subfile of the component Student Assignment Submission Handler. This manipulation causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12270?
The severity of CVE-2025-12270 has been assessed to be critical due to the potential exploitation of the vulnerability in the LearnHouse Student Assignment Submission Handler.
How do I fix CVE-2025-12270?
To fix CVE-2025-12270, update the LearnHouse Student Assignment Submission Handler to a version newer than 98dfad76aad70711a8113f6c1fdabfccf10509ca.
What specific component is affected by CVE-2025-12270?
CVE-2025-12270 affects the student assignment submission handler in the LearnHouse application.
Can CVE-2025-12270 lead to unauthorized access?
Yes, CVE-2025-12270 can lead to unauthorized access if exploited, allowing attackers to manipulate student assignment submissions.
What function is exploited in CVE-2025-12270?
CVE-2025-12270 exploits an unknown function in the /api/v1/assignments/{assignment_id}/tasks/{task_id}/sub_file endpoint.