4 matches found
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
6.2CVSS6.5AI score0.10706EPSS
SaveExploits3References2
CVE-2024-27612
The Numbas editor (versions 7.2 and below ) is vulnerable to Remote Code Execution (RCE) due to the mishandling of theme and extension edits. This Improper Input Validation (CWE-20) allows an attacker to execute arbitrary code on a target system. Proof-of-concept exploits are available, such as t...
6.2CVSS6.7AI score0.10706EPSS
SaveExploits3References2Affected Software1
20