Vulnerabilidades em autolab
11 resultadosAnálise Vexday
A Autolab registra 11 vulnerabilidades na base Vexday, nenhuma delas em exploração ativa (KEV) ou classificada como crítica. A fraqueza dominante é CWE-22 (Path Traversal), indicando problemas de validação de caminho de arquivo. Não há vulnerabilidades publicadas nos últimos 90 dias, sugerindo que o risco é estável e de natureza histórica.
CVE-2022-41956MEDIUMAutolab is vulnerable to file disclosure via remote handin featureEPSS 1.8%CVE-2022-41955HIGHAutolab is vulnerable to remote code execution (RCE) via MOSS functionalityEPSS 1.5%CVE-2023-32676MEDIUMAutolab tar slip in Install Assessment functionality (`GHSL-2023-081`)EPSS 0.9%CVE-2023-32317MEDIUMAutolab tar slip in cheat checker functionality (`GHSL-2023-082`)EPSS 0.9%CVE-2022-0936HIGHCross-site Scripting (XSS) - Stored in autolab/autolabEPSS 0.7%CVE-2023-44395MEDIUMAutolab has Path Traversal vulnerability in Assessment functionalityEPSS 0.6%CVE-2024-53258HIGHdownload_all_submissions allows student to download another student's submissions in AutolabEPSS 0.5%CVE-2024-53260MEDIUMCourse Roster vulnerable to CSV Injection in AutolabEPSS 0.5%CVE-2024-49376HIGHAutolab Has Misconfigured Reset Password PermissionsEPSS 0.5%CVE-2024-52585LOWAutolab has HTML Injection VulnerabilityEPSS 0.3%CVE-2024-52584MEDIUMAutolab has vulnerable submission endpointsEPSS 0.3%