CVE-2023-43194

Published November 2nd, 2023

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.

Submitty/Submitty

Homework Submission, Automated Grading, and TA grading system.

GitHub

773