What is CVE-2020-24381?

CVE-2020-24381 is a high-severity vulnerability in Gunet Open Eclass Platform, classified under Information Disclosure. CVSS score: 7.5/10. Published 2020-08-19.

How severe is CVE-2020-24381?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Gunet Open Eclass Platform

CVE-2020-24381

GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that the web server blocks directory listings, and the data directory is inside the web root by default.

Vulnerability class: Information Disclosure

EPSS: 0.014 (68.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Gunet Open_eclass_platform
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2020-24381?: CVE-2020-24381 is a high-severity vulnerability in Gunet Open Eclass Platform, classified under Information Disclosure. CVSS score: 7.5/10. Published 2020-08-19.
How severe is CVE-2020-24381?: High severity. CVSS v3 base score is 7.5 out of 10.