Security Advisory

CVE-2026-24666

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-03 16:58:57

Last updated 2026-02-04 16:51:54

Assigner GitHub_M

State PUBLISHED

Description

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Site Request Forgery (CSRF) vulnerability in multiple teacher-restricted endpoints allows attackers to induce authenticated teachers to perform unintended actions, such as modifying assignment grades, via crafted requests. This issue has been patched in version 4.2.

← Browse all CVEs View on cve.org ↗