CVE-2018-16367

2018-09-0222:00:00

mitre

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

32.5%

JSON

In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include.

References

github.com/QingdaoU/OnlineJudge/issues/165