Lucene search

K

Submitty Security Vulnerabilities - 2023

cve

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS.

6.1CVSS

6AI Score

0.0005EPSS

2023-11-02 12:15 PM

26

cve

Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.

5.3CVSS

5.2AI Score

0.0005EPSS

2023-11-02 10:15 PM

34