CVE-2026-24773

7.5 highEPSS 0.4%

High (7.5) in gunet open eclass platform. EPSS 0.4% chance of exploitation in the next 30 days.

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecure Direct Object Reference (IDOR) vulnerability allows unauthenticated remote attackers to access personal files of other users by directly requesting predictable user identifiers. This issue has been patched in version 4.2.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2026-02-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gunet:open_eclass_platform

References

https://github.com/gunet/openeclass/security/advisories/GHSA-63pm-pff4-xc9c

Check your stack JSON