Frappe Learning Management System Path Traversal Vulnerability in SCORM Package Upload

A path traversal vulnerability has been identified in Frappe Learning Management System (LMS) versions through 2.49.0. This vulnerability allows users with course editing roles to upload SCORM ZIP packages that can write files outside the designated directory. The issue arises from insufficient validation of extraction paths in SCORM packages, enabling unauthorized file writing.

Impact

Exploitation of this vulnerability could lead to unauthorized file writing on the server, potentially overwriting critical files or causing other unintended consequences.

Remediation

Users are advised to update to Frappe LMS version 2.50.1 or higher, where this vulnerability has been patched by validating extraction paths to ensure they remain within the SCORM directory.