Creator LMS

An authenticated Contributor can reach an upload operation that permits arbitrary files. The export does not identify the upload endpoint, file field, permitted executable types or destination path. Server-side code execution would require an executable file to be placed where the server will run it; that complete chain is not disclosed. Affected versions: <= 1.2.21. The authoritative export identifies 1.2.22 as fixed for this CVE.

The supplied vector requires no attacker account. A caller can reach an operation without the intended permission check. The export does not identify the endpoint, action, object, selector parameter or precise protected operation. Unauthorized changes are possible, but account takeover or code execution is not established. The vector reports no confidentiality impact, low integrity impact, no availability impact. No victim interaction is required by the vector. Affected versions: <= 1.2.21. The authoritative export identifies 1.2.22 as fixed for this CVE.

Contributor Path Traversal in Creator LMS <= 1.2.19 versions. The affected file-handling endpoint, path parameter and filesystem scope are unspecified. The authoritative export does not identify the vulnerable endpoint, action, parameter or function, so the precise input-to-operation path cannot be established from this snapshot. The authoritative export identifies the fixed release as 1.2.20.

Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions. The operation and resulting impact are not described beyond this classification. The authoritative export does not identify the vulnerable endpoint, action, parameter or function, so the precise input-to-operation path cannot be established from this snapshot. The authoritative export identifies the fixed release as 1.2.20.

Creator LMS is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess. The published affected range is n/a through <= 1.1.18.

Creator LMS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.