Login Request a demo
GI
Product
gibbon
by gibbonedu · last CVE Sep 25, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 3High 6Medium 10Low 1
Severity
All severities20Critical3High6Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add gibbon to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-24724
9.8
26%
Apr 3
Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig…
Affected: through 26.0.00
CVE-2023-45878
9.8
63%
Nov 14
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication
Affected: through 25.0.01
CVE-2023-34598
9.8
47%
Jun 29
Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's…
Affected: 25.0.00
Showing 3