cvedb.io
CVE-2026-24667
MEDIUM · CVSS 5
EPSS exploitation probability: 0%
Published 2026-02-03T18:16:19.917 · Last modified 2026-06-17T10:23:23.243

Summary

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, failure to invalidate active user sessions after a password change allows existing session tokens to remain valid, potentially enabling unauthorized continued access to user accounts. This issue has been patched in version 4.2.

Affected products

gunet — open_eclass_platform

Does this affect you?

Add your gear to cvedb and we'll alert you only when gunet ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.