Nixpkgs security tracker
Frappe Learning Management System has Client-Side Manipulation of Quiz Scores
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.46.0, a vulnerability has been identified in Frappe Learning where quiz scores can be modified by students before submission. The application currently relies on client-side calculated scores, which can be altered using browser developer tools prior to sending the submission request. While this does not allow modification of other users’ data or privilege escalation, it compromises the integrity of quiz results and undermines academic reliability. This issue affects data integrity but does not expose confidential information or allow unauthorized access to other accounts. This vulnerability is fixed in 2.46.0.
References
-
https://github.com/frappe/lms/security/advisories/GHSA-9573-68xq-hwrx x_refsource_CONFIRM
Affected products
- ==< 2.46.0
Matching in nixpkgs
pkgs.lms
Lightweight Music Server - Access your self-hosted music using a web interface
pkgs.flmsg
Digital modem message program
pkgs.helmsman
Helm Charts (k8s applications) as Code tool
pkgs.lmstudio
LM Studio is an easy to use desktop app for experimenting with local and open-source Large Language Models (LLMs)
pkgs.python312Packages.calmsize
Take a number of bytes and return a human-readable string
pkgs.python313Packages.calmsize
Take a number of bytes and return a human-readable string
pkgs.python313Packages.lmstudio
LM Studio Python SDK
pkgs.python314Packages.calmsize
Take a number of bytes and return a human-readable string
pkgs.python314Packages.lmstudio
LM Studio Python SDK
pkgs.python312Packages.dlms-cosem
Python module to parse DLMS/COSEM
pkgs.python313Packages.dlms-cosem
Python module to parse DLMS/COSEM
pkgs.python314Packages.dlms-cosem
Python module to parse DLMS/COSEM
pkgs.python313Packages.llm-lmstudio
Plugin to use local models via LM Studio API with https://llm.datasette.io
pkgs.python314Packages.llm-lmstudio
Plugin to use local models via LM Studio API with https://llm.datasette.io
pkgs.python312Packages.llama-index-llms-ollama
LlamaIndex LLMS Integration for ollama
pkgs.python312Packages.llama-index-llms-openai
LlamaIndex LLMS Integration for OpenAI
pkgs.python313Packages.llama-index-llms-ollama
LlamaIndex LLMS Integration for ollama
pkgs.python313Packages.llama-index-llms-openai
LlamaIndex LLMS Integration for OpenAI
pkgs.python312Packages.llama-index-llms-openai-like
LlamaIndex LLMS Integration for OpenAI like
pkgs.python313Packages.llama-index-llms-openai-like
LlamaIndex LLMS Integration for OpenAI like
pkgs.pkgsRocm.python3Packages.llama-index-llms-ollama
LlamaIndex LLMS Integration for ollama
pkgs.pkgsRocm.python3Packages.llama-index-llms-openai
LlamaIndex LLMS Integration for OpenAI
pkgs.pkgsRocm.python3Packages.llama-index-llms-openai-like
LlamaIndex LLMS Integration for OpenAI like
pkgs.python312Packages.llama-index-multi-modal-llms-openai
LlamaIndex Multi-Modal-Llms Integration for OpenAI
pkgs.python313Packages.llama-index-multi-modal-llms-openai
LlamaIndex Multi-Modal-Llms Integration for OpenAI
pkgs.pkgsRocm.python3Packages.llama-index-multi-modal-llms-openai
LlamaIndex Multi-Modal-Llms Integration for OpenAI
Package maintainers
-
@dysinger Tim Dysinger <tim@dysinger.net>
-
@sarcasticadmin Robert James Hernandez <rob@sarcasticadmin.com>
-
@Lynty Lynn Dong <ltdong93+nix@gmail.com>
-
@mksafavi MK Safavi <mksafavi@gmail.com>
-
@crertel Chris Ertel <chris@kedagital.com>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@jherland Johan Herland <johan@herland.net>
-
@dwt Martin Häcker <spamfaenger@gmx.de>
-
@GaetanLepage Gaetan Lepage <gaetan@glepage.com>