MarkUsProject vulnerabilities
8 published CVEs name MarkUsProject among the affected products.
- 8Published CVEs8 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-25962
MarkUs: Zip bomb in config upload enables DoS
MarkUsProject · Markus
Medium6.5 - CVE-2026-27807
MarkUs: YAML alias (‘billion laughs’) DoS in config upload
MarkUsProject · Markus
Medium4.9 - CVE-2026-28405
MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions
MarkUsProject · Markus
High8.0 - CVE-2026-25057
Zip Slip in MarkUs config upload allowing RCE
MarkUsProject · Markus
Critical9.1 - CVE-2026-24900
MarkUs has a submission-view IDOR exposes all student submissions
MarkUsProject · Markus
Medium6.5 - CVE-2024-51743
Arbitrary File Write leading up to remote code execution (instructor accounts)
MarkUsProject · Markus
High7.1 - CVE-2024-51499
MarkUs Arbitrary File Write leading up to remote code execution (student accounts)
MarkUsProject · Markus
High7.1 - CVE-2024-47820
MarkUs vulnerable to Path Traversal
MarkUsProject · Markus
Medium5.7