Skip to content
OpenAdvisories

Product · foundation50

classroom50

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.4

    Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

    Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's assignment repository and then writes autograde artifacts (`result.json` and `results…