Openeclass
Approved changes feed: RSS · Atom
cpe:2.3:a:gunet:openeclass:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gunet (92dc1390-b545-53d9-878b-b76b16033bbf) |
|---|---|
| Product | Openeclass (95373ee9-521f-53d6-85cf-aee3004d0506) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24774 |
vulnerable | 2026-06-08 07:51:18.151735 |
Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities
MEDIUM (4.3)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by directly accessing a crafted URL. This issue has been patched in version 4.2.
Published: 2026-02-03T16:58:09.741Z
Updated: 2026-02-04T16:52:06.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24773 |
vulnerable | 2026-06-08 07:51:18.151367 |
Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files
HIGH (7.5)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecure Direct Object Reference (IDOR) vulnerability allows unauthenticated remote attackers to access personal files of other users by directly requesting predictable user identifiers. This issue has been patched in version 4.2.
Published: 2026-02-03T16:57:57.900Z
Updated: 2026-02-04T16:52:13.108Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24674 |
vulnerable | 2026-06-08 07:51:17.974198 |
Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints
MEDIUM (4.7)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Scripting (XSS) vulnerability allows remote attackers to execute arbitrary JavaScript in the context of authenticated users by crafting malicious URLs and tricking victims into visiting them. This issue has been patched in version 4.2.
Published: 2026-02-03T16:57:07.664Z
Updated: 2026-02-04T16:52:19.445Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24673 |
vulnerable | 2026-06-08 07:51:17.973946 |
Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction
MEDIUM (4.3)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the application’s built-in decompression functionality. This issue has been patched in version 4.2.
Published: 2026-02-03T16:56:59.723Z
Updated: 2026-02-04T16:52:24.978Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24672 |
vulnerable | 2026-06-08 07:51:17.973547 |
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields
HIGH (7.3)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated students to inject malicious JavaScript into user profile fields, which is executed when users with viewing privileges access affected application pages. This issue has been patched in version 4.2.
Published: 2026-02-03T16:56:36.889Z
Updated: 2026-02-04T16:52:30.735Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24671 |
vulnerable | 2026-06-08 07:51:17.973307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24670 |
vulnerable | 2026-06-08 07:51:17.973050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24669 |
vulnerable | 2026-06-08 07:51:17.972733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24668 |
vulnerable | 2026-06-08 07:51:17.972393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24667 |
vulnerable | 2026-06-08 07:51:17.972061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24666 |
vulnerable | 2026-06-08 07:51:17.971707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24665 |
vulnerable | 2026-06-08 07:51:17.971315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24664 |
vulnerable | 2026-06-08 07:51:17.970092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22241 |
vulnerable | 2026-06-08 07:49:17.765412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38530 |
vulnerable | 2026-06-08 06:41:47.639142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.