PatchTheCVECVE-2023-44395: Autolab is a course management service that enables instructors to offer autograded programming assignments to
CVE-2023-44395 is a medium-severity flaw (CVSS 4.9) affecting autolab. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Autolab is a course management service that enables instructors to offer autograded programming assignments to their students over the Web. Path traversal vulnerabilities were discovered in Autolab's assessment functionality in versions of Autolab prior to 2.12.0, whereby instructors can perform arbitrary file reads. Version 2.12.0 contains a patch. There are no feasible workarounds for this issue.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.9 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 0.6% (top 51%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2024-01-22 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-44395?
autolab: upgrade to 2.12.0. Exact commands for each OS are on this page.
Is CVE-2023-44395 being exploited?
CVE-2023-44395 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-44395 affect?
CVE-2023-44395 affects autolab. Severity is medium (CVSS 4.9). Autolab is a course management service that enables instructors to offer autograded programming assignments to their students over the Web. Path traversal vulnerabilities were discovered in Autolab's assessment functionality in versions of
How urgent is CVE-2023-44395?
Priority 29/100. No elevated risk signals yet.
Related CVEs
- CVE-2024-53260 MEDIUM 6.8 UPGRADE Autolab is a course management service that enables auto-graded programming assignments
- CVE-2024-53258 MEDIUM 5.3 UPGRADE Autolab is a course management service that enables auto-graded programming assignments
- CVE-2024-52585 MEDIUM 5.4 DOWNGRADE Autolab is a course management service that enables auto-graded programming assignments
- CVE-2024-52584 MEDIUM 5.4 DOWNGRADE Autolab is a course management service that enables auto-graded programming assignments
- CVE-2024-49376 HIGH 8.8 DOWNGRADE Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset