Threats tagged 'ghsa-px5v-8vpf-hw32'

Gibbon versions before v30.0.01 contain a local file inclusion vulnerability that can lead to remote code execution (RCE). This occurs by changing the report archive directory and causing a user-supplied .zip file to be interpreted as PHP code. Exploitation requires the attacker to have Teacher or higher privileges. Successful exploitation could compromise the underlying web server.