CVE-2024-26503

2024-03-1400:00:00

mitre

www.cve.org

file upload

greek universities

open eclass

arbitrary code

certbadge.php

cve-2024-26503

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

References

www.less-secure.com/2024/03/open-eclass-cve-2024-26503-unrestricted.html