CVE-2024-31777

The GUnet OpenEclass e-learning platform (versions 3.15 and earlier ) is vulnerable to an unrestricted file upload flaw within the certbadge.php endpoint. This vulnerability allows authenticated attackers with administrative privileges to exploit the ZIP functionality to upload crafted files, lea...