Autolab vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest Autolab vulnerabilities

CVE-2024-53260 — Course Roster vulnerable to CSV Injection in Autolab (CVSS 6.8)
CVE-2024-53258 — download_all_submissions allows student to download another student's submissions in Autolab (CVSS 5.3)
CVE-2024-52585 — Autolab has HTML Injection Vulnerability (CVSS 5.4)
CVE-2024-52584 — Autolab has vulnerable submission endpoints (CVSS 5.4)
CVE-2024-49376 — Autolab Has Misconfigured Reset Password Permissions (CVSS 8.8)
CVE-2023-44395 — Autolab has Path Traversal vulnerability in Assessment functionality (CVSS 6.5)
CVE-2023-32676 — Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`) (CVSS 7.2)
CVE-2023-32317 — Autolab tar slip in cheat checker functionality (`GHSL-2023-082`) (CVSS 7.2)
CVE-2022-41956 — Autolab is vulnerable to file disclosure via remote handin feature (CVSS 6.5)
CVE-2022-41955 — Autolab is vulnerable to remote code execution (RCE) via MOSS functionality (CVSS 8.8)
CVE-2022-0936 — Cross-site Scripting (XSS) - Stored in autolab/autolab (CVSS 5.4)