Open Eclass Platform

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGunet (92dc1390-b545-53d9-878b-b76b16033bbf)
ProductOpen Eclass Platform (6d2fd5de-c667-5d77-ad50-d87ca63aa0e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gunet/openeclass purl2cpe 2026-06-01 10:16:13.717673

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-24774 vulnerable 2026-06-08 07:51:18.151766 Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities
MEDIUM (4.3)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by directly accessing a crafted URL. This issue has been patched in version 4.2.
Published: 2026-02-03T16:58:09.741Z
Updated: 2026-02-04T16:52:06.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24773 vulnerable 2026-06-08 07:51:18.151404 Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files
HIGH (7.5)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecure Direct Object Reference (IDOR) vulnerability allows unauthenticated remote attackers to access personal files of other users by directly requesting predictable user identifiers. This issue has been patched in version 4.2.
Published: 2026-02-03T16:57:57.900Z
Updated: 2026-02-04T16:52:13.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24674 vulnerable 2026-06-08 07:51:17.974226 Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints
MEDIUM (4.7)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Scripting (XSS) vulnerability allows remote attackers to execute arbitrary JavaScript in the context of authenticated users by crafting malicious URLs and tricking victims into visiting them. This issue has been patched in version 4.2.
Published: 2026-02-03T16:57:07.664Z
Updated: 2026-02-04T16:52:19.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24673 vulnerable 2026-06-08 07:51:17.973976 Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction
MEDIUM (4.3)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the application’s built-in decompression functionality. This issue has been patched in version 4.2.
Published: 2026-02-03T16:56:59.723Z
Updated: 2026-02-04T16:52:24.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24672 vulnerable 2026-06-08 07:51:17.973696 Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields
HIGH (7.3)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated students to inject malicious JavaScript into user profile fields, which is executed when users with viewing privileges access affected application pages. This issue has been patched in version 4.2.
Published: 2026-02-03T16:56:36.889Z
Updated: 2026-02-04T16:52:30.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24671 vulnerable 2026-06-08 07:51:17.973334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24670 vulnerable 2026-06-08 07:51:17.973079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24669 vulnerable 2026-06-08 07:51:17.972848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24668 vulnerable 2026-06-08 07:51:17.972518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24667 vulnerable 2026-06-08 07:51:17.972093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24666 vulnerable 2026-06-08 07:51:17.971837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24665 vulnerable 2026-06-08 07:51:17.971362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24664 vulnerable 2026-06-08 07:51:17.970865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38530 vulnerable 2026-06-08 06:41:47.638304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33253 vulnerable 2026-06-08 06:37:30.962287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31777 vulnerable 2026-06-08 06:35:32.094286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44266 vulnerable 2026-06-08 05:36:45.641054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24381 vulnerable 2026-06-08 05:22:32.936421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.