CVE-2014-9127: Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allo...

Security readout for executives and security teams

Open-School Community Edition 2.2 allowed logged-in users to access export functionality without proper authorization. That could let a lower-privileged account obtain sensitive information intended only for authorized roles. The public record does not provide severity scoring, patch details, or confirmed real-world exploitation. Exposure appears limited to organizations running Open-School Community Edition 2.2 with user accounts able to reach the affected web application. Risk depends on what data the export function exposes and whether low-privileged authenticated users exist. Treat this as a targeted data exposure risk if Open-School 2.2 is in use. Prioritize inventory and access review before emergency response, because severity and active exploitation are not established in the provided evidence. Mitigation focus: Identify any Open-School Community Edition 2.2 deployments.; Check vendor or project guidance for a fixed release or workaround.; Restrict export functionality to explicitly authorized administrative roles..

Prepared

Jun 6, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.