CVE-2020-24381

GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that…

published August 19, 2020

CVSS
—
EPSS
1%
Percentile
71.4
In the wild
Unconfirmed
What it is

GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that the web server blocks directory listings, and the data directory is inside the web root by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01356 · 71.4th percentile
Published
2020-08-19T11:50Z
EPSS history
Timeline
  • 19 AUG 11:50Z
    GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that…
    cvelistv5