CVE-2024-49376
Autolab Has Misconfigured Reset Password Permissions
Résumé
Autolab Has Misconfigured Reset Password Permissions
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords. This issue is fixed in version 3.0.1. No known workarounds exist.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com