Cross-Site Request Forgery Vulnerability in Gibbon Educational Framework
CVE-2025-26211

3.7LOW

Key Information:

Vendor

Gibbonedu

Status
Gibbon
Vendor
CVE Published:
27 May 2025

What is CVE-2025-26211?

A vulnerability exists in the Gibbon Educational Framework which allows attackers to exploit Cross-Site Request Forgery (CSRF) by sending unauthorized commands on behalf of a legitimate user. This weakness can lead to unintended actions being taken within the application without the user's consent. It is critical for users of Gibbon prior to version 29.0.00 to implement patches and updates to safeguard against potential attacks that exploit this CSRF vulnerability.

Affected Version(s)

Gibbon 0 < 29.0.00

References

https://github.com/GibbonEdu/core/blob/be891ab97b058a933b...
https://github.com/GibbonEdu/core/releases/tag/v29.0.00

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.