CVE-2024-26503

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

CVSS v3.1 CNA

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

1.13% chance of exploitation in the next 30 days, 66th percentile

Published

2024-03-14

Updated

2024-08-28

Proof-of-concept exploits (1)

• RoboGR00t/Exploit-CVE-2024-265033★ · 2024-03-15

Security advisories

• https://www.less-secure.com/2024/03/open-eclass-cve-2024-26503-unrestricted.html

References

• CVE Record
• NVD entry