PatchTheCVEopeneclass vulnerabilities and fixes
Recent CVEs affecting openeclass, with upgrade or downgrade steps. 5 tracked.
openeclass has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-03-16. Highest priority: CVE-2024-31777 (score 67/100).
- CVE-2026-22241 HIGH 7.2 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
- CVE-2025-65734 MEDIUM 5.4 UPGRADE An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eCla
- CVE-2024-38530 CRITICAL 9.8 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete Course Management System
- CVE-2024-33253 MEDIUM 5.4 UPGRADE Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allow
- CVE-2024-31777 CRITICAL 9.8 UPGRADE File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a c
FAQ
How do I fix openeclass vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openeclass being exploited right now?
None of the tracked openeclass CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openeclass CVE should I patch first?
CVE-2024-31777 currently ranks highest (67/100): File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a c.