Read the docs

autolab

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

autolab records in CISA KEV

No autolab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Autolab 11 records HIGH

Records

11 records

TI-2022-20296 CVE-2022-41955

Autolab is vulnerable to remote code execution (RCE) via MOSS functionality

Priority MEDIUM 41

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01556 Published 2023-01-14 No fix listed CWE-78
TI-2022-20297 CVE-2022-41956

Autolab is vulnerable to file disclosure via remote handin feature

Priority LOW 33

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01849 Published 2023-01-14 No fix listed CWE-22
TI-2024-32961 CVE-2024-49376 · GHSA-v46j-h43h-rwrm

Autolab Has Misconfigured Reset Password Permissions

Priority LOW 32

Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00467 Published 2024-10-25 Fixed in 3.0.1 CWE-287
TI-2022-00835 CVE-2022-0936 · GHSA-6hcq-48q8-26c8

Cross-site Scripting (XSS) - Stored in autolab/autolab

Priority LOW 25

Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00656 Published 2022-04-11 Fixed in 2.8.0 CWE-79
TI-2024-35244 CVE-2024-52584

Autolab has vulnerable submission endpoints

Priority LOW 22

Autolab is a course management service that enables auto-graded programming assignments.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00254 Published 2024-11-18 No fix listed CWE-863
TI-2024-35245 CVE-2024-52585

Autolab has HTML Injection Vulnerability

Priority LOW 7

Autolab is a course management service that enables auto-graded programming assignments.

CVSS 4.0LOW 1.2 Network Low privileges User interaction EPSS 0.00279 Published 2024-11-18 No fix listed CWE-79
Open these records in search →