https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:40:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-8547 EUVD-2026-8547 https://cve.radiocsirt.org/vuln/euvd-2026-8547 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32317 <p>Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted Tar file. Both &#34;Base File Tar&#34; and &#34;Additional file archive&#34; can be fed with Tar files that contain paths outside their target directories (e.g., `../../../../tmp/tarslipped2.sh`). When the MOSS cheat checker is started the files inside of the archives are expanded to the attacker-chosen locations. This issue may lead to arbitrary file write within the scope of the running process. This issue has been addressed in version 2.11.0. Users are advised to upgrade.</p> <p>Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the MOSS cheat checker functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted Tar file. Both &#34;Base File Tar&#34; and &#34;Additional file archive&#34; can be fed with Tar files that contain paths outside their target directories (e.g., `../../../../tmp/tarslipped2.sh`). When the MOSS cheat checker is started the files inside of the archives are expanded to the attacker-chosen locations. This issue may lead to arbitrary file write within the scope of the running process. This issue has been addressed in version 2.11.0. Users are advised to upgrade.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32317 https://cve.radiocsirt.org/vuln/gsd-2023-32317 gsd-2023-32317 https://cve.radiocsirt.org/vuln/gsd-2023-32317