| Package | Affected versions | Patched versions |
|---|---|---|
| openeclass | ≥ 3.11, < 3.13 | 3.13 |
An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free