PT-2024-32832
CVE-2024-47820
·
تاريخ النشر
2024-11-18
·
تاريخ التحديث
2025-09-04
الوصف من
CVSS 3.1
5.7
متوسطةالمقاييسAV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions
MarkUs versions prior to 2.4.8
Description
The issue affects MarkUs, a web application for the submission and grading of student assignments. It is vulnerable to path traversal, allowing authenticated instructors to download any file on the web server MarkUs is running on, depending on the file permissions.
Recommendations
For versions prior to 2.4.8, upgrade to MarkUs version 2.4.8 to address the path traversal issue.
At the moment, there is no information about other workarounds aside from upgrading to version 2.4.8.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾