Log in / Sign up

Vulnerability details

CVE-2024-51499

MarkUsProject Markus

MarkUs Arbitrary File Write leading up to remote code execution (student accounts)

CVSS 4.0
7.1High

Official description

MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability accessible via the update_files method of the SubmissionsController allows authenticated users (e.g. students) to write arbitrary files to any location on the web server MarkUs is running on (depending on the permissions of the underlying filesystem). e.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading.

CVSS scores

ScoreVersionSourceVector
7.1High 4.0 CVEProject cvelistV5 (CNA) (GitHub_M) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Affected products

VendorProductVersionsSource
MarkUsProject Markus < 2.4.8 CVEProject cvelistV5 (CNA)

References and advisories

2
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2024-11-18
Last updated
2024-11-18
State
Published
Assigner (CNA)
GitHub_M

Exploit prediction (EPSS)

0.71%
Probability of exploitation in 30 days
53.9%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-434
    Unrestricted Upload of File with Dangerous Type