CVE-2024-31026

10th percentile - higher than 10% of all known CVEs

An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.

An attacker can exploit the vulnerability to execute malicious code in the application context, potentially leading to system compromise or data theft.

Update Open eClass Platform to a patched version or apply appropriate security measures such as input filtering in the chat field.