Autolabproject vulnerabilities

Products

• Autolab 11

Newest

• autolab Course Roster vulnerable to CSV Injection in Autolab CVE-2024-53260 6.8 MediumNovember 27, 2024
• autolab download_all_submissions allows student to download another student's submissions in Autolab CVE-2024-53258 7.1 HighNovember 25, 2024
• autolab Autolab has HTML Injection Vulnerability CVE-2024-52585 1.2 LowNovember 18, 2024
• autolab Autolab has vulnerable submission endpoints CVE-2024-52584 4.9 MediumNovember 18, 2024
• autolab Autolab Has Misconfigured Reset Password Permissions CVE-2024-49376 Fix available 7.1 HighOctober 25, 2024
• autolab Autolab has Path Traversal vulnerability in Assessment functionality CVE-2023-44395 4.9 MediumJanuary 22, 2024
• autolab Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`) CVE-2023-32676 6.7 MediumMay 26, 2023
• autolab Autolab tar slip in cheat checker functionality (`GHSL-2023-082`) CVE-2023-32317 6.7 MediumMay 26, 2023
• autolab Autolab is vulnerable to file disclosure via remote handin feature CVE-2022-41956 6.5 MediumJanuary 14, 2023
• autolab Autolab is vulnerable to remote code execution (RCE) via MOSS functionality CVE-2022-41955 8.8 HighJanuary 14, 2023
• autolab autolab/autolab, autolabproject autolab +1 more Cross-site Scripting (XSS) - Stored in autolab/autolab CVE-2022-0936 7.6 HighApril 11, 2022