CVE-2024-52584

Autolab is a course management service that enables auto-graded programming assignments. There is a vulnerability in version 3.0.1 where CAs can view or edit the grade for any submission ID, even if they are not a CA for the class that has the submission. The endpoints only check that the CAs hav...

PT-2024-35381 · Autolab · Autolab

Name of the Vulnerable Software and Affected Versions: Autolab version 3.0.1 Description: Autolab is a course management service that enables auto-graded programming assignments. There is an issue where CAs can view or edit the grade for any submission ID, even if they are not a CA for the class...