PatchTheCVECVE-2024-47820: MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path travers
CVE-2024-47820 is a medium-severity flaw (CVSS 5.7) affecting markus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8. Authenticated instructors may download any file on the web server MarkUs is running on, depending on the file permissions. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.7 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 45%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2024-11-18 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-47820?
markus: upgrade to 2.4.8. Exact commands for each OS are on this page.
Is CVE-2024-47820 being exploited?
CVE-2024-47820 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-47820 affect?
CVE-2024-47820 affects markus. Severity is medium (CVSS 5.7). MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8. Authenticated instructors may download any file on the web server MarkUs is running on, depending o
How urgent is CVE-2024-47820?
Priority 34/100. No elevated risk signals yet.
Related CVEs
- CVE-2026-28405 HIGH 8.0 UPGRADE MarkUs is a web application for the submission and grading of student assignments
- CVE-2026-27807 MEDIUM 4.9 UPGRADE MarkUs is a web application for the submission and grading of student assignments
- CVE-2026-25962 MEDIUM 6.5 UPGRADE MarkUs is a web application for the submission and grading of student assignments
- CVE-2024-51743 HIGH 8.8 UPGRADE MarkUs is a web application for the submission and grading of student assignments
- CVE-2024-51499 HIGH 8.8 UPGRADE MarkUs is a web application for the submission and grading of student assignments