The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the application’s built-in decompression functionality. This issue has been patched in version 4.2.
References
| Link | Resource |
|---|---|
| https://github.com/gunet/openeclass/security/advisories/GHSA-3g4j-56gp-v6wv | Exploit Vendor Advisory |
Configurations
History
10 Feb 2026, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gunet
Gunet open Eclass Platform |
|
| References | () https://github.com/gunet/openeclass/security/advisories/GHSA-3g4j-56gp-v6wv - Exploit, Vendor Advisory | |
| CPE | cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:* |
03 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-03 18:16
Updated : 2026-02-10 17:32
NVD link : CVE-2026-24673
Mitre link : CVE-2026-24673
CVE.ORG link : CVE-2026-24673
JSON object : View
Products Affected
gunet
- open_eclass_platform
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type