CVE-2025-56747: Medium severity Creativeitem Academy LMS vulnerability
Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-56747?
CVE-2025-56747 is classified as a high severity privilege escalation vulnerability.
How do I fix CVE-2025-56747?
To remediate CVE-2025-56747, update Creativeitem Academy LMS to version 5.14 or later which resolves the role validation issue.
Who is affected by CVE-2025-56747?
Users of Creativeitem Academy LMS versions 5.13 and earlier are affected by CVE-2025-56747.
What problems can CVE-2025-56747 cause?
CVE-2025-56747 allows unauthorized users to create and manage courses, potentially compromising the integrity of the LMS.
Is there a workaround for CVE-2025-56747 before a patch is available?
No official workaround exists for CVE-2025-56747; upgrading to the latest version is strongly recommended.