Markusproject
Markusproject Markus: vulnerabilidades y CVE
Markusproject Markus tiene 8 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses5
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-27807 | Media (4.9) | 0.47% | — | 6 mar 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows course instructors to upload YAML files to create/update various entities (e.g., assignment… |
| CVE-2026-25962 | Media (6.5) | 0.45% | — | 6 mar 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs currently extracts zip files without any size or entry-count limits. For example, instructors can upload… |
| CVE-2026-28405 | Media (5.4) | 0.41% | — | 5 mar 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content route reads the contents of a… |
| CVE-2026-25057 | Crítica (9.1) | 0.49% | — | 9 feb 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration… |
| CVE-2026-24900 | Media (6.5) | 0.27% | — | 9 feb 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content accepted a select_file_id parameter to… |
| CVE-2024-51743 | Alta (7.1) | 0.74% | — | 18 nov 2024 | MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability in the update/upload/create file methods in Controllers allows… |
| CVE-2024-51499 | Alta (7.1) | 0.72% | — | 18 nov 2024 | MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability accessible via the update_files method of the SubmissionsController… |
| CVE-2024-47820 | Baja (3.5) | 0.75% | — | 18 nov 2024 | MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8. Authenticated instructors may download any file on the web server MarkUs is… |