Skip to content
OpenAdvisories

Vendor

autolab

11 known vulnerabilities.

Products

Autolab 10 autolab/autolab 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2024-53258

    download_all_submissions allows student to download another student's submissions in Autolab

    Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature…

    autolab Autolab
  • High 7.1
    CVE-2024-49376

    Autolab Has Misconfigured Reset Password Permissions

    Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged …

    autolab Autolab Autolab RubyGems
  • High 8.8
    CVE-2022-41955

    Autolab is vulnerable to remote code execution (RCE) via MOSS functionality

    Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was dis…

    autolab Autolab
  • High 7.6
    CVE-2022-0936

    Cross-site Scripting (XSS) - Stored in autolab/autolab

    Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0.

    autolab autolab/autolab