PatchTheCVEjnoj vulnerabilities
Recent CVEs affecting jnoj products. 6 tracked.
jnoj has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-10-13. Highest priority: CVE-2019-17538 (score 60/100).
- CVE-2019-17538 HIGH 7.5 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/vi
- CVE-2019-17537 HIGH 7.5 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/d
- CVE-2019-17493 MEDIUM 6.1 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/cr
- CVE-2019-17491 MEDIUM 6.1 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/cre
- CVE-2019-17490 HIGH 8.8 DOWNGRADE app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary f
- CVE-2019-17489 MEDIUM 6.1 DOWNGRADE Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create
FAQ
How do I fix jnoj vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jnoj being exploited right now?
None of the tracked jnoj CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jnoj CVE should I patch first?
CVE-2019-17538 currently ranks highest (60/100): Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/vi.