https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-53260.htmlhttps://patchthecve.com/cve/CVE-2024-53260.htmlWed, 17 Jun 2026 08:08:42 +0000MEDIUM 6.8: Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This cohttps://patchthecve.com/cve/CVE-2024-53258.htmlhttps://patchthecve.com/cve/CVE-2024-53258.htmlWed, 17 Jun 2026 08:08:42 +0000MEDIUM 5.3: Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissiohttps://patchthecve.com/cve/CVE-2024-52585.htmlhttps://patchthecve.com/cve/CVE-2024-52585.htmlWed, 17 Jun 2026 08:07:29 +0000MEDIUM 5.4: Autolab is a course management service that enables auto-graded programming assignments. There is an HTML injection vulnerability in version 3.0.1 that can affect instructors and CAs on the grade submissions page. The issue is patched in version 3.0.2. One may apply the patch manually by editing linhttps://patchthecve.com/cve/CVE-2024-52584.htmlhttps://patchthecve.com/cve/CVE-2024-52584.htmlWed, 17 Jun 2026 08:07:29 +0000MEDIUM 5.4: Autolab is a course management service that enables auto-graded programming assignments. There is a vulnerability in version 3.0.1 where CAs can view or edit the grade for any submission ID, even if they are not a CA for the class that has the submission. The endpoints only check that the CAs have thttps://patchthecve.com/cve/CVE-2024-49376.htmlhttps://patchthecve.com/cve/CVE-2024-49376.htmlWed, 17 Jun 2026 07:59:47 +0000HIGH 8.8: Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwohttps://patchthecve.com/cve/CVE-2023-44395.htmlhttps://patchthecve.com/cve/CVE-2023-44395.htmlWed, 17 Jun 2026 06:27:33 +0000MEDIUM 4.9: Autolab is a course management service that enables instructors to offer autograded programming assignments to their students over the Web. Path traversal vulnerabilities were discovered in Autolab's assessment functionality in versions of Autolab prior to 2.12.0, whereby instructors can perform arb