Skip to contentAutolabproject Autolab vulnerabilities
- autolabCourse Roster vulnerable to CSV Injection in AutolabCVE-2024-532606.8 Medium
- autolabdownload_all_submissions allows student to download another student's submissions in AutolabCVE-2024-532587.1 High
- autolabAutolab has HTML Injection VulnerabilityCVE-2024-525851.2 Low
- autolabAutolab has vulnerable submission endpointsCVE-2024-525844.9 Medium
- autolabAutolab Has Misconfigured Reset Password PermissionsCVE-2024-49376Fix available7.1 High
- autolabAutolab has Path Traversal vulnerability in Assessment functionalityCVE-2023-443954.9 Medium
- autolabAutolab tar slip in Install Assessment functionality (`GHSL-2023-081`)CVE-2023-326766.7 Medium
- autolabAutolab tar slip in cheat checker functionality (`GHSL-2023-082`)CVE-2023-323176.7 Medium
- autolabAutolab is vulnerable to file disclosure via remote handin featureCVE-2022-419566.5 Medium
- autolabAutolab is vulnerable to remote code execution (RCE) via MOSS functionalityCVE-2022-419558.8 High
- autolab autolab/autolab, autolabproject autolab +1 moreCross-site Scripting (XSS) - Stored in autolab/autolabCVE-2022-09367.6 High