CVE-2024-27612

The Numbas editor (versions 7.2 and below ) is vulnerable to Remote Code Execution (RCE) due to the mishandling of theme and extension edits. This Improper Input Validation (CWE-20) allows an attacker to execute arbitrary code on a target system. Proof-of-concept exploits are available, such as t...

CVE-2024-27613

CVE-2024-27613 affects the Numbas editor prior to version 7.3, where the issue is a mishandling of reading themes and extensions in the editor. The CVE has a CVSS v3.1 base score of 7.3 (HIGH), with network attack vector, no privileges required, and no user interaction. Impact is described as low...