gunet vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202614

Newest CVEs

• CVE-2026-24669

  Open eClass Insecure Password Reset Token Reuse Enables Account Takeover

  gunet · openeclass

  High7.8
• CVE-2026-24668

  Open eClass Broken Access Control Allows Students to Add Content to Course Units

  gunet · openeclass

  Medium6.5
• CVE-2026-24667

  Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access

  gunet · openeclass

  Medium5.0
• CVE-2026-24666

  Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions

  gunet · openeclass

  Medium6.5
• CVE-2026-24665

  Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload

  gunet · openeclass

  High8.7
• CVE-2026-24774

  Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities

  gunet · openeclass

  Medium4.3
• CVE-2026-24773

  Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files

  gunet · openeclass

  High7.5
• CVE-2026-24674

  Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints

  gunet · openeclass

  Medium4.7
• CVE-2026-24673

  Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction

  gunet · openeclass

  Medium4.3
• CVE-2026-24672

  Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields

  gunet · openeclass

  High7.3