Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: autolab Clear all filters
TI-2024-35245 CVE-2024-52585

Autolab has HTML Injection Vulnerability

Priority LOW 7

Autolab is a course management service that enables auto-graded programming assignments.

CVSS 4.0LOW 1.2 Network Low privileges User interaction EPSS 0.00279 Published 2024-11-18 No fix listed CWE-79
TI-2024-35244 CVE-2024-52584

Autolab has vulnerable submission endpoints

Priority LOW 22

Autolab is a course management service that enables auto-graded programming assignments.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00254 Published 2024-11-18 No fix listed CWE-863
TI-2024-32961 CVE-2024-49376 · GHSA-v46j-h43h-rwrm

Autolab Has Misconfigured Reset Password Permissions

Priority LOW 32

Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00467 Published 2024-10-25 Fixed in 3.0.1 CWE-287
TI-2022-20297 CVE-2022-41956

Autolab is vulnerable to file disclosure via remote handin feature

Priority LOW 33

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01849 Published 2023-01-14 No fix listed CWE-22
TI-2022-20296 CVE-2022-41955

Autolab is vulnerable to remote code execution (RCE) via MOSS functionality

Priority MEDIUM 41

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01556 Published 2023-01-14 No fix listed CWE-78
TI-2022-00835 CVE-2022-0936 · GHSA-6hcq-48q8-26c8

Cross-site Scripting (XSS) - Stored in autolab/autolab

Priority LOW 25

Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00656 Published 2022-04-11 Fixed in 2.8.0 CWE-79