CyberSecBulletin

Autolab vulnerabilities

We track 4 vulnerabilities in Autolab products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 25, 2024.

4vulnerabilities
0critical
4high
0exploited
8.0average CVSS score

Latest Autolab vulnerabilities

  • 8.8 High severity

    Autolab: Incorrect Authorization

    CVE-2024-49376Autolab

    Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged u

  • 7.2 High severity

    Autolab: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2023-32676Autolab

    Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the Install assessment functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions

  • 7.2 High severity

    Autolab: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2023-32317Autolab

    Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions

  • 8.8 High severity

    Autolab: Improper Neutralization of Special Elements used in a Command

    CVE-2022-41955AutolabEPSS 1.62%

    Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was disc