vendor:
Numbas
by:
Matheus Boschetti
6.1
CVSS
HIGH
Remote Code Execution
RCE
CWE
Product Name: Numbas
Affected Version From: 7.2
Affected Version To: 7.2
Patch Exists: YES
Related CWE: CVE-2024-27612
CPE: a:numbas_project:numbas:7.2
Platforms Tested: Linux
2024
Numbas < v7.3 - Remote Code Execution
The Numbas software version 7.2 and below allows remote attackers to execute arbitrary code via crafted input, due to improper input validation. This vulnerability has been assigned CVE-2024-27612.
Mitigation:
Update to version 7.3 or later to mitigate this remote code execution vulnerability.
