Vulnerabilidades do Os4ed Opensis

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Os4ed Opensis: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:os4ed:opensis

CVE-2026-11944 Média · 6.5 CWE-22 14/07/2026

openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download

openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.

CVE-2025-65594 Alta · 8.1 CWE-284 09/12/2025

Improper Access Control em Os4ed Opensis

OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users.