Cross-Site Request Forgery Vulnerability in Gibbon Educational Framework
CVE-2025-26211

8.8HIGH

Key Information:

Vendor

Gibbonedu

Status
Gibbon
Vendor
CVE Published:
27 May 2025

What is CVE-2025-26211?

A vulnerability exists in the Gibbon Educational Framework which allows attackers to exploit Cross-Site Request Forgery (CSRF) by sending unauthorized commands on behalf of a legitimate user. This weakness can lead to unintended actions being taken within the application without the user's consent. It is critical for users of Gibbon prior to version 29.0.00 to implement patches and updates to safeguard against potential attacks that exploit this CSRF vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Gibbon 0 < 29.0.00

References

https://github.com/GibbonEdu/core/blob/be891ab97b058a933b...
https://github.com/GibbonEdu/core/releases/tag/v29.0.00

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.