CVE-2023-34598: Gibbonedu Gibbon

Critical severity, CVSS 9.8. EPSS: 47.2% chance of exploitation in the next 30 days.

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.

Affected products

• Gibbonedu Gibbon: version 25.0.00 only

Published 2023-06-29. Last modified 2026-06-17.