Vulnerabilities in MarkUsProject

8 results

Vexday analysis

MarkUsProject registra 8 vulnerabilidades conhecidas, nenhuma em exploração ativa. Uma é crítica (CVSS), enquanto a fraqueza dominante (CWE-434: Upload de arquivo irrestrito) sugere risco estrutural de validação. O portfólio não apresenta atualizações críticas recentes, indicando risco moderado e estável.

CVE-2024-47820MEDIUMMarkUs vulnerable to Path TraversalEPSS 0.7%CVE-2024-51743HIGHArbitrary File Write leading up to remote code execution (instructor accounts)EPSS 0.7%CVE-2024-51499HIGHMarkUs Arbitrary File Write leading up to remote code execution (student accounts)EPSS 0.7%CVE-2026-25057CRITICALZip Slip in MarkUs config upload allowing RCEEPSS 0.5%CVE-2026-27807MEDIUMMarkUs: YAML alias (‘billion laughs’) DoS in config uploadEPSS 0.3%CVE-2026-24900MEDIUMMarkUs has a submission-view IDOR exposes all student submissionsEPSS 0.3%CVE-2026-25962MEDIUMMarkUs: Zip bomb in config upload enables DoSEPSS 0.3%CVE-2026-28405HIGHMarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context ActionsEPSS 0.2%