Skip to content
OpenAdvisories

Vendor

davemckain

1 known vulnerabilities.

Products

qtiworks 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2022-39367

    Vulnerability in handling of uploaded QTI ZIP files

    QTIWorks is a software suite for standards-based assessment delivery. Prior to version 1.0-beta15, the QTIWorks Engine allows users to upload QTI content packages as ZIP files. The ZIP handling code does not sufficiently check the paths of files contained wit…

    davemckain qtiworks