Rcos Submitty vulnerabilities
4 known vulnerabilities affecting rcos/submitty.
Total CVEs
4
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2020-13121P3MEDIUMCVSS 6.1PoC≤ 20.04.012020-05-16
CVE-2020-13121 [MEDIUM] CWE-601 CVE-2020-13121: Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login
Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.
nvd
CVE-2020-12882P4MEDIUMCVSS 5.4PoC≤ 20.04.012020-05-15
CVE-2020-12882 [MEDIUM] CWE-79 CVE-2020-12882: Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by
Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.
nvd
CVE-2023-43194P4MEDIUMCVSS 5.3v22.06.002023-11-02
CVE-2023-43194 [MEDIUM] CWE-862 CVE-2023-43194: Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post
Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.
nvd
CVE-2023-43193P4MEDIUMCVSS 6.1fixed in 22.06.002023-11-02
CVE-2023-43193 [MEDIUM] CWE-79 CVE-2023-43193: Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a mali
Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS.
nvd