Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: gibbonedu gibbon — github.com/GibbonEdu/core/releases/tag/v30.0.01 Clear all filters
TI-2026-07230 CVE-2026-8209 · GHSA-f8qc-g9ff-p4m7

Path traversal in gibbonedu gibbon

Priority LOW 30

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the file and a DOS cond…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00293 Published 2026-05-09 Fixed in 30.0.01 CWE-23
TI-2026-07228 CVE-2026-8207 · GHSA-jhg5-9w7p-xm6m

SQL injection in gibbonedu gibbon

Priority MEDIUM 64

Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874adece5d2dc7e408e9aa2d1abadb/modules/Tracki…

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00226 Published 2026-05-09 Fixed in 30.0.01 CWE-89