What’s Vulnerable › Vulnerabilities

CVE-2020-37115: GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-03 · updated 2026-06-17
• Weakness: CWE-256

Description

GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access.

Affected products

• gunet openeclass: 1.7.3

References

• https://download.openeclass.org/files/docs/1.7/CHANGES.txt
• https://www.exploit-db.com/exploits/48163
• https://www.openeclass.org/
• https://www.vulncheck.com/advisories/gunet-openeclass-e-learning-platform-plaintext-password-storage

Get alerted when CVE-2020-37115 or the next vulnerability affects your stack