Markusproject Markus vulnerabilities
- markusproject markus MarkUs: Zip bomb in config upload enables DoS 6.5 Medium
- markusproject markus MarkUs: YAML alias (‘billion laughs’) DoS in config upload 4.9 Medium
- markusproject markus MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions 8.0 High
- markusproject markus Zip Slip in MarkUs config upload allowing RCE 9.1 Critical
- markusproject markus MarkUs has a submission-view IDOR exposes all student submissions 6.5 Medium
- markusproject markus Arbitrary File Write leading up to remote code execution (instructor accounts) 7.1 High
- markusproject markus MarkUs Arbitrary File Write leading up to remote code execution (student accounts) 7.1 High
- markusproject markus MarkUs vulnerable to Path Traversal 5.7 Medium