Masteriyo
Masteriyo - LMS: vulnerabilidades y CVE
Masteriyo - LMS tiene 8 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses7
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-62132 | Media (5.3) | 0.29% | — | 11 sept 2026 | Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions. |
| CVE-2026-62107 | Alta (8.8) | 0.52% | — | 11 sept 2026 | Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions. |
| CVE-2026-73996 | Crítica (9.8) | 0.52% | — | 18 ago 2026 | Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions. |
| CVE-2026-65463 | Media (5.4) | 0.29% | — | 23 jul 2026 | Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions. |
| CVE-2026-42743 | Media (6.5) | 0.20% | — | 15 jun 2026 | Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. |
| CVE-2026-39524 | Alta (7.5) | 0.35% | — | 15 jun 2026 | Unauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions. |
| CVE-2025-64270 | Media (6.5) | 0.32% | — | 18 dic 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo -… |
| CVE-2025-54699 | Media (6.5) | 0.22% | — | 14 ago 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Stored XSS.This issue affects Masteriyo - LMS: from n/a… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.