Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-8209

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction result

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PRJBLK

Description

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the file and a DOS condition. Successful exploitation requires Teacher or higher privileges. Exploitation could result in loss of availability of the web application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gibbonedu gibbon

Default version status: unaffected

  • 0 to < 30.0.01affected

References