T
he Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Site Request Forgery (CSRF) vulnerability in multiple teacher-restricted endpoints allows attackers to induce authenticated teachers to perform unintended actions, such as modifying assignment grades, via crafted requests. This issue has been patched in version 4.2.
References
| Link | Resource |
|---|---|
| https://github.com/gunet/openeclass/security/advisories/GHSA-cgmh-73qg-28fm | Exploit Vendor Advisory |
Configurations
History
10 Feb 2026, 18:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/gunet/openeclass/security/advisories/GHSA-cgmh-73qg-28fm - Exploit, Vendor Advisory | |
| CPE | cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:* | |
| First Time |
Gunet
Gunet open Eclass Platform |
03 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-03 18:16
Updated : 2026-02-10 18:47
NVD link : CVE-2026-24666
Mitre link : CVE-2026-24666
CVE.ORG link : CVE-2026-24666
JSON object : View
Products Affected
CWE
CWE-352
Cross-Site Request Forgery (CSRF)