Skip to content
OpenAdvisories

Vendor

learningequality

1 known vulnerabilities.

Products

kolibri 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-48053

    Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset

    Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The o…

    learningequality kolibri kolibri PyPI