PT-2020-13339

Name of the Vulnerable Software and Affected Versions Submitty versions 20.04.01 and earlier Description The issue is related to an open redirect via the "authentication/login?old=" endpoint during an invalid login attempt. Recommendations For Submitty versions 20.04.01 and earlier, as a temporar...

CVE-2020-13121: URL Redirection to Untrusted Site

Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt...

CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

Cross site scripting

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

CVE-2020-12882

CVE-2020-12882 concerns Submitty up to version 20.04.01, where an SVG document upload in submissions enables cross-site scripting. The collected sources consistently describe an XSS vulnerability originating from insufficient validation of client-side data during SVG uploads, as demonstrated by a...

PT-2020-13314

Name of the Vulnerable Software and Affected Versions Submitty versions through 20.04.01 Description The issue allows for XSS via the upload of an SVG document. This can be exploited by an attack, for example, by a Student against a Teaching Fellow. Recommendations For versions through 20.04.01,...

CVE-2020-12882: Improper Neutralization of Input During Web Page Generation

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...