Vulnerabilities (CVE)

Filtered by vendor Rcos Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13121 1 Rcos 1 Submitty 2024-02-04 5.8 MEDIUM 6.1 MEDIUM
Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.
CVE-2020-12882 1 Rcos 1 Submitty 2024-02-04 3.5 LOW 5.4 MEDIUM
Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.