Skip to content
OpenAdvisories

Vendor

thm-mni-ii

2 known vulnerabilities.

Products

feedbacksystem 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2023-37468

    Storing unencrypted LDAP passwords in feedbacksystem

    Feedbacksystem is a personalized feedback system for students using artificial intelligence. Passwords of users using LDAP login are stored in clear text in the database. The LDAP users password is passed unencrypted in the LoginController.scala and stored in…

    thm-mni-ii feedbacksystem
  • Medium 4.3
    CVE-2023-27485

    Insufficient verification of authorisation when accessing subresults in thmmniii/fbs-core

    thmmniii/fbs-core is an open source feedback system for students. In versions prior to 1.5.3 when querying `subresults`, it is possible to query `subresults` from other users due to insufficient authorisation. This is only possible for logged-in users and it …

    thm-mni-ii feedbacksystem