Arbitrary Code Execution

de.tum.in.ase: artemis-java-test-sandbox is vulnerable to Arbitrary Code Execution. The vulnerability is due to missing class sanitization during the creation of special subclasses of type InvocationTargetException. An attacker can execute arbitrary student code in the trusted context...