https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:44:49.444496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24666 CVE-2026-24666 — Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions 2026-10-08T21:44:49.462170+00:00

Affected: gunet openeclass

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Site Request Forgery (CSRF) vulnerability in multiple teacher-restricted endpoints allows attackers to induce authenticated teachers to perform unintended actions, such as modifying assignment grades, via crafted requests. This issue has been patched in version 4.2.