Skip to content
CVE PROGRAM SOURCE RECORD8.9 High

CVE-2026-8208

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PRJBLK

Description

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user provided .zip as PHP. Successful exploitation requires Teacher or higher privileges. Exploitation could result in compromise of the underlying web server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gibbonedu gibbon

Default version status: affected

  • 0 to < 30.0.01affected

References