Description (CNA)
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| th30d4y / OpenLearnX | affected < 2.0.3 |
CWE
CWE-78, CWE-94, CWE-250, CWE-284, CWE-693
References
- https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw
- https://github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e
- https://github.com/th30d4y/OpenLearnX/releases/tag/v2.0.3-security-fix
ADP enrichment
No English description supplied.
No references supplied.