CVE-2022-33116: Openeclass

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and below allows attackers to read arbitrary files via a directory traversal.

Affected products

• Openeclass Openeclass: up to and including 3.12.4

Published 2022-06-27. Last modified 2026-06-17.