Vulnerability · Published Feb 3, 2026 · Assigned by VulnCheck

CVE-2020-37114GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure

Medium 4.3

In plain English

A medium-severity information exposure in GUnet OpenEclass from Openeclass. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.4%top 66.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system information, application version, and other students' uploaded assessments, due to improper access controls and information disclosure flaws in various modules. Attackers can retrieve system info, version info, and view or download other users' files without proper authorization.

Affected products (as reported)

Vendor	Product	Versions
Openeclass	GUnet OpenEclass	1.7.3 (2007)

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

ExploitDB-48163 exploit
Official Vendor Homepage product
Changelog product
VulnCheck Advisory: GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure third-party-advisory