PatchTheCVEjiangnan online judge vulnerabilities and fixes
Recent CVEs affecting jiangnan online judge, with upgrade or downgrade steps. 6 tracked.
Also searched as: jiangnanonlinejudge.
jiangnan online judge has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-10-13. Highest priority: CVE-2019-17538 (score 60/100).
- CVE-2019-17538 HIGH 7.5 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/vi
- CVE-2019-17537 HIGH 7.5 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/d
- CVE-2019-17493 MEDIUM 6.1 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/cr
- CVE-2019-17491 MEDIUM 6.1 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/cre
- CVE-2019-17490 HIGH 8.8 DOWNGRADE app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary f
- CVE-2019-17489 MEDIUM 6.1 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create
FAQ
How do I fix jiangnan online judge vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jiangnan online judge being exploited right now?
None of the tracked jiangnan online judge CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jiangnan online judge CVE should I patch first?
CVE-2019-17538 currently ranks highest (60/100): Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/vi.