PT-2026-6198 · Unknown · Open Eclass

Stolichnayer · Publicado 2026-02-03 · Atualizado 2026-02-10 · CVE-2026-24666

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Open eClass versions prior to 4.2

Description The Open eClass platform, previously known as GUnet eClass, is a course management system. A Cross-Site Request Forgery (CSRF) issue exists in teacher-restricted endpoints prior to version 4.2. This allows attackers to trick authenticated teachers into performing unwanted actions, such as altering assignment grades, through specially designed requests. The affected endpoints allow unauthorized actions.

Recommendations Update to version 4.2 or later.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-24666

GHSA-CGMH-73QG-28FM

Produtos afetados

Open Eclass

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24666.json · Exploit
• https://github.com/gunet/openeclass/security/advisories/GHSA-cgmh-73qg-28fm · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-24666 · Aviso do Fabricante
• https://t.me/CVEtracker/43631 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-24666 · Nota de Segurança
• https://t.me/cveNotify/151611 · Publicação no Telegram