What is GHSA-5v7m-6h74-672r?

GHSA-5v7m-6h74-672r is a security advisory published by GitHub Security Advisories with Medium severity. openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy...

Which CVE IDs does GHSA-5v7m-6h74-672r cover?

GHSA-5v7m-6h74-672r covers the following CVE IDs: CVE-2026-11944. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5v7m-6h74-672r?

GHSA-5v7m-6h74-672r has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-5v7m-6h74-672rMediumCVSS 6.5

openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy...

Vendor

GitHub Security Advisories

Published

July 14, 2026

Last Modified

July 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-11944 →

📋 Description

openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-11944
https://fluidattacks.com/es/advisories/toto
https://github.com/OS4ED/openSIS-Classic
https://github.com/advisories/GHSA-5v7m-6h74-672r