TI-2026-34751 CVE-2026-47161
RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization
Priority HIGH 73
RELATE is a web-based courseware package.
inducer
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
inducer records in CISA KEVNo inducer vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2024-21319 CVE-2024-32406 · GHSA-3jgv-pfqj-v626
Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1…
Priority HIGH 68
Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function.
TI-2024-21317 CVE-2024-32404 · GHSA-vpgr-vqw9-62cw
Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1…
Priority MEDIUM 62
Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.
TI-2024-21320 CVE-2024-32407 · GHSA-66c8-9r5r-35hf
An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary…
Priority MEDIUM 48
An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature.
TI-2026-30141 CVE-2026-41588
RELATE: Timing Attack Vulnerability in course/auth.py — check_sign_in_key()
Priority MEDIUM 41
RELATE is a web-based courseware package.
Priority LOW 39
RELATE is a web-based courseware package.
Priority LOW 37
RELATE is a web-based courseware package.
TI-2024-21318 CVE-2024-32405 · GHSA-hgxr-xh47-wjx5
Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote…
Priority LOW 14
Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field of InlineMultiQuestion parameter on Exam function.