autolabproject records
11 published records for vendor autolabproject.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 54.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-863 Incorrect Authorization1
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2022-41955No exploit | Autolab is vulnerable to remote code execution (RCE) via MOSS functionalityautolabproject · autolab · CWE-78 | High8.8 | — | 1.5% | Jan 13, 2023 |
28Monitor | CVE-2023-32676No exploit | Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`)autolabproject · autolab · CWE-22 | High7.2 | — | 0.9% | May 26, 2023 |
28Monitor | CVE-2023-32317No exploit | Autolab tar slip in cheat checker functionality (`GHSL-2023-082`)autolabproject · autolab · CWE-22 | High7.2 | — | 0.8% | May 26, 2023 |
28Monitor | CVE-2024-53258No exploit | download_all_submissions allows student to download another student's submissions in Autolabautolabproject · autolab · CWE-359 | High7.1 | — | 0.4% | Nov 25, 2024 |
28Monitor | CVE-2024-49376No exploit | Autolab Has Misconfigured Reset Password Permissionsautolabproject · autolab · CWE-287 | High7.1 | — | 0.4% | Oct 25, 2024 |
27Monitor | CVE-2022-41956No exploit | Autolab is vulnerable to file disclosure via remote handin featureautolabproject · autolab · CWE-22 | Medium6.5 | — | 1.8% | Jan 13, 2023 |
27Monitor | CVE-2024-53260No exploit | Course Roster vulnerable to CSV Injection in Autolabautolabproject · autolab · CWE-1236 | Medium6.8 | — | 0.4% | Nov 27, 2024 |
26Monitor | CVE-2023-44395No exploit | Autolab has Path Traversal vulnerability in Assessment functionalityautolabproject · autolab · CWE-22 | Medium6.5 | — | 0.6% | Jan 22, 2024 |
21Monitor | CVE-2022-0936No exploit | Cross-site Scripting (XSS) - Stored in autolab/autolabautolabproject · autolab · CWE-79 | Medium5.4 | — | 0.6% | Apr 11, 2022 |
19Monitor | CVE-2024-52584No exploit | Autolab has vulnerable submission endpointsautolabproject · autolab · CWE-863 | Medium4.9 | — | 0.2% | Nov 18, 2024 |
4Monitor | CVE-2024-52585No exploit | Autolab has HTML Injection Vulnerabilityautolabproject · autolab · CWE-79 | Low1.2 | — | 0.2% | Nov 18, 2024 |
- CVE-2022-4195535Monitor
Autolab is vulnerable to remote code execution (RCE) via MOSS functionality
HighCVSS 8.8No exploitEPSS 1%autolabproject · autolabJan 13, 2023
- CVE-2023-3267628Monitor
Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`)
HighCVSS 7.2No exploitEPSS 0%autolabproject · autolabMay 26, 2023
- CVE-2023-3231728Monitor
Autolab tar slip in cheat checker functionality (`GHSL-2023-082`)
HighCVSS 7.2No exploitEPSS 0%autolabproject · autolabMay 26, 2023
- CVE-2024-5325828Monitor
download_all_submissions allows student to download another student's submissions in Autolab
HighCVSS 7.1No exploitEPSS 0%autolabproject · autolabNov 25, 2024
- CVE-2024-4937628Monitor
Autolab Has Misconfigured Reset Password Permissions
HighCVSS 7.1No exploitEPSS 0%autolabproject · autolabOct 25, 2024
- CVE-2022-4195627Monitor
Autolab is vulnerable to file disclosure via remote handin feature
MediumCVSS 6.5No exploitEPSS 1%autolabproject · autolabJan 13, 2023
- CVE-2024-5326027Monitor
Course Roster vulnerable to CSV Injection in Autolab
MediumCVSS 6.8No exploitEPSS 0%autolabproject · autolabNov 27, 2024
- CVE-2023-4439526Monitor
Autolab has Path Traversal vulnerability in Assessment functionality
MediumCVSS 6.5No exploitEPSS 0%autolabproject · autolabJan 22, 2024
- CVE-2022-093621Monitor
Cross-site Scripting (XSS) - Stored in autolab/autolab
MediumCVSS 5.4No exploitEPSS 0%autolabproject · autolabApr 11, 2022
- CVE-2024-5258419Monitor
Autolab has vulnerable submission endpoints
MediumCVSS 4.9No exploitEPSS 0%autolabproject · autolabNov 18, 2024
- CVE-2024-525854Monitor
Autolab has HTML Injection Vulnerability
LowCVSS 1.2No exploitEPSS 0%autolabproject · autolabNov 18, 2024