Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-8209 EUVD-2026-28899GHSA-f8qc-g9ff-p4m7

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application…

Published May 9, 2026 · Updated May 11, 2026 · Assigned by PRJBLK

Description

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the file and a DOS condition. Successful exploitation requires Teacher or higher privileges. Exploitation could result in loss of availability of the web application.

Affected products

VendorProductAffectedFixed
gibbonedu gibbon < 30.0.01 30.0.01

References