Beveiligingsadvies

CVE-2026-24673

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-03 16:56:59
Laatst bijgewerkt 2026-02-04 16:52:24
Toegewezen door GitHub_M
CVSS-score 4.3
Status PUBLISHED

Beschrijving

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the application’s built-in decompression functionality. This issue has been patched in version 4.2.