CVE-2023-42807

Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest main branch of the app.

• CWE-89

• https://github.com/frappe/lms/security/advisories/GHSA-wvq3-3wvp-6x63Third Party Advisory
• https://github.com/frappe/lms/security/advisories/GHSA-wvq3-3wvp-6x63Third Party Advisory

Published

Sep 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42801Moonlight-common-c contains the core GameStream client code …7.6
• CVE-2023-42802GLPI is a free asset and IT management software package. Sta…9.8
• CVE-2023-42803BigBlueButton is an open-source virtual classroom. BigBlueBu…8.8
• CVE-2023-42804BigBlueButton is an open-source virtual classroom. BigBlueBu…5.3
• CVE-2023-42805quinn-proto is a state machine for the QUIC transport protoc…7.5
• CVE-2023-42806Hydra is the layer-two scalability solution for Cardano. Pri…6.5
• CVE-2023-42808Common Voice is the web app for Mozilla Common Voice, a plat…6.1
• CVE-2023-42809Redisson is a Java Redis client that uses the Netty framewor…8.8
• CVE-2023-4281This Activity Log WordPress plugin before 2.8.8 retrieves cl…5.3
• CVE-2023-42810systeminformation is a System Information Library for Node.J…9.8
• CVE-2023-42811aes-gcm is a pure Rust implementation of the AES-GCM. Starti…5.5
• CVE-2023-42812Galaxy is an open-source platform for FAIR data analysis. Pr…4.3