Vulnerabilities

TI-2026-20987 CVE-2026-25962

MarkUs: Zip bomb in config upload enables DoS

LOW 29

MarkUs is a web application for the submission and grading of student assignments.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00295 Published 2026-03-06 Fixed in 2.9.4 CWE-409

TI-2026-22160 CVE-2026-27807

LOW 22

MarkUs is a web application for the submission and grading of student assignments.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-03-06 Fixed in 2.9.4 CWE-776

TI-2026-22679 CVE-2026-28405

LOW 36

MarkUs is a web application for the submission and grading of student assignments.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0026 Published 2026-03-05 Fixed in 2.9.1 CWE-79

TI-2026-20241 CVE-2026-25057

MEDIUM 42

MarkUs is a web application for the submission and grading of student assignments.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00546 Published 2026-02-09 Fixed in 2.9.1 CWE-23

TI-2026-20085 CVE-2026-24900

LOW 29

MarkUs is a web application for the submission and grading of student assignments.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00298 Published 2026-02-09 Fixed in 2.9.1 CWE-639

TI-2024-34648 CVE-2024-51743

LOW 35

MarkUs is a web application for the submission and grading of student assignments.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00744 Published 2024-11-18 Fixed in 2.4.8 CWE-434

TI-2024-34420 CVE-2024-51499

LOW 32

MarkUs is a web application for the submission and grading of student assignments.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00716 Published 2024-11-18 Fixed in 2.4.8 CWE-434

TI-2024-32087 CVE-2024-47820

LOW 27

MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8.

CVSS 3.1MEDIUM 5.7 Adjacent network High privileges No interaction EPSS 0.00748 Published 2024-11-18 Fixed in 2.4.8 CWE-22