Lucene search

Rcos Security Vulnerabilities

cve

Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request...

5.3CVSS

5.2AI Score

0.0005EPSS

2023-11-02 10:15 PM

cve

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to...

6.1CVSS

6AI Score

0.0005EPSS

2023-11-02 12:15 PM

cve

Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login...

6.1CVSS

6.3AI Score

0.002EPSS

2020-05-16 08:15 PM

cve

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching...

5.4CVSS

5.2AI Score

0.001EPSS

2020-05-15 05:15 AM