CVE-2024-26503

2024-03-1422:15:22

[email protected]

web.nvd.nist.gov

file upload

greek universities network

open eclass

arbitrary code

certbadge.php

cve-2024-26503

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

References

www.less-secure.com/2024/03/open-eclass-cve-2024-26503-unrestricted.html