CVE-2020-24381
 
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that the web server blocks directory listings, and the data directory is inside the web root by default.
La plataforma GUnet Open eClass (también conocida como openeclass) antes de la versión 3.11 podría permitir a atacantes remotos leer las evaluaciones enviadas por los estudiantes porque no asegura que el servidor web bloquee los listados de directorios, y el directorio de datos está dentro de la raíz de la web por defecto
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-08-17 CVE Reserved
- 2020-08-19 CVE Published
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://emaragkos.gr/cve-2020-24381 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://github.com/gunet/openeclass/issues/39 | 2024-08-04 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Gunet Search vendor "Gunet" | Open Eclass Platform Search vendor "Gunet" for product "Open Eclass Platform" | < 3.11 Search vendor "Gunet" for product "Open Eclass Platform" and version " < 3.11" | - |
Affected
|