CVE-2021-40651: OS4ED Opensis

Medium severity, CVSS 6.5. EPSS: 17.9% chance of exploitation in the next 30 days.

OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the application has access to the file.

Affected products

• OS4ED Opensis: version 8.0 only

Published 2021-09-29. Last modified 2026-06-17.