Read the docs

MarkUsProject

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

MarkUsProject records in CISA KEV

No MarkUsProject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Markus 8 records MEDIUM

Records

8 records

TI-2026-20241 CVE-2026-25057

Zip Slip in MarkUs config upload allowing RCE

Priority MEDIUM 42

MarkUs is a web application for the submission and grading of student assignments.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00546 Published 2026-02-09 Fixed in 2.9.1 CWE-23
TI-2026-20987 CVE-2026-25962

MarkUs: Zip bomb in config upload enables DoS

Priority LOW 29

MarkUs is a web application for the submission and grading of student assignments.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00295 Published 2026-03-06 Fixed in 2.9.4 CWE-409
TI-2024-32087 CVE-2024-47820

MarkUs vulnerable to Path Traversal

Priority LOW 27

MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8.

CVSS 3.1MEDIUM 5.7 Adjacent network High privileges No interaction EPSS 0.00748 Published 2024-11-18 Fixed in 2.4.8 CWE-22
Open these records in search →