Vulnerabilities in MarkUsProject
8 resultsCVE-2024-47820MEDIUMMarkUs vulnerable to Path TraversalEPSS 0.7%CVE-2024-51743HIGHArbitrary File Write leading up to remote code execution (instructor accounts)EPSS 0.7%CVE-2024-51499HIGHMarkUs Arbitrary File Write leading up to remote code execution (student accounts)EPSS 0.7%CVE-2026-25057CRITICALZip Slip in MarkUs config upload allowing RCEEPSS 0.5%CVE-2026-27807MEDIUMMarkUs: YAML alias (‘billion laughs’) DoS in config uploadEPSS 0.3%CVE-2026-25962MEDIUMMarkUs: Zip bomb in config upload enables DoSEPSS 0.3%CVE-2026-24900MEDIUMMarkUs has a submission-view IDOR exposes all student submissionsEPSS 0.3%CVE-2026-28405HIGHMarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context ActionsEPSS 0.2%