CVE-2024-49376 — Autolab Has Misconfigured Reset Password Permissions
Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, u…
Published: 2024-10-25 · CVSS: 7.1 · CVSS 4.0
Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords. This issue is fixed in version 3.0.1. No known workarounds exist.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7