Description

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file.

INFO

Published Date :

2026-03-16T00:00:00.000Z

Last Modified :

2026-03-16T17:24:36.260Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-65734 vulnerability.

Vendors Products
Gunet
  • Open Eclass
REFERENCES

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact