What’s Vulnerable › Vulnerabilities

CVE-2020-37114: GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-03 · updated 2026-06-17
• Weakness: CWE-200

Description

GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system information, application version, and other students' uploaded assessments, due to improper access controls and information disclosure flaws in various modules. Attackers can retrieve system info, version info, and view or download other users' files without proper authorization.

Affected products

• gunet openeclass: 1.7.3

References

• https://download.openeclass.org/files/docs/1.7/CHANGES.txt
• https://www.exploit-db.com/exploits/48163
• https://www.openeclass.org/
• https://www.vulncheck.com/advisories/gunet-openeclass-e-learning-platform-information-disclosure

Get alerted when CVE-2020-37114 or the next vulnerability affects your stack