MarkUsProject vulnerabilities
We track 3 vulnerabilities in MarkUsProject products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 9, 2026.
Latest MarkUsProject vulnerabilities
- 9.1 Critical severity
Markus: Relative Path Traversal
MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration (courses/<:course_id>/assignments/upload_config_files). The uplo
- 7.1 High severity
Markus: Unrestricted Upload of File with Dangerous Type
MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability in the update/upload/create file methods in Controllers allows authenticated instructors to write arbitrary fil
- 8.8 High severity
Markus: Unrestricted Upload of File with Dangerous Type
MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability accessible via the update_files method of the SubmissionsController allows authenticated users (e.g. students)