Aautolab

Products

Exploited and recent CVEs

• CVE-2024-53260 Medium 6.8 Course Roster vulnerable to CSV Injection in Autolab 0.5%
• CVE-2024-53258 High 7.1 download_all_submissions allows student to download another student's submissions in Autolab 0.5%
• CVE-2024-52585 Low 1.2 Autolab has HTML Injection Vulnerability 0.3%
• CVE-2024-52584 Medium 4.9 Autolab has vulnerable submission endpoints 0.3%
• CVE-2024-49376 High 7.1 Autolab Has Misconfigured Reset Password Permissions 0.5%
• CVE-2023-44395 Medium 4.9 Autolab has Path Traversal vulnerability in Assessment functionality 0.6%
• CVE-2023-32676 Medium 6.7 Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`) 0.9%
• CVE-2023-32317 Medium 6.7 Autolab tar slip in cheat checker functionality (`GHSL-2023-082`) 0.9%
• CVE-2022-41956 Medium 6.5 Autolab is vulnerable to file disclosure via remote handin feature 1.8%
• CVE-2022-41955 High 8.8 Autolab is vulnerable to remote code execution (RCE) via MOSS functionality 1.6%
• CVE-2022-0936 High 7.6 Cross-site Scripting (XSS) - Stored in autolab/autolab 0.7%