CVE-2022-33116

MEDIUM 6.5CVE-2022-33116 · Published 27/06/2022 · updated 17/06/2026

In short

CVE-2022-33116 is a MEDIUM (CVSS 6.5) vulnerability affecting openeclass (openeclass).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openeclass openeclass	`≤ 3.12.4`	No fix yet

Description

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and below allows attackers to read arbitrary files via a directory traversal.

References

emaragkos.gr/gunet-open-eclass-authenticated-path-traversal · Exploit
gunet/openeclass · Product
hg.gunet.gr/openeclass/diff/cbfc90094d51/modules/mindmap/index.php · Patch
openeclass.org/en · Product

More vulnerabilities in openeclass

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openeclass

≤ 3.12.4

No fix yet

More vulnerabilities in openeclass

See all →