MA
Vendor
MarkUsProject
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-25962 | MA Markus MarkUsProject | 6.5 | Mar 6 | MarkUs: Zip bomb in config upload enables DoS |
| CVE-2026-27807 | MA Markus MarkUsProject | 4.9 | Mar 6 | MarkUs: YAML alias (‘billion laughs’) DoS in config upload |
| CVE-2026-28405 | MA Markus MarkUsProject | 5.4 | Mar 5 | MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions |
| CVE-2026-25057 | MA Markus MarkUsProject | 9.1 | Feb 9 | Zip Slip in MarkUs config upload allowing RCE |
| CVE-2026-24900 | MA Markus MarkUsProject | 6.5 | Feb 9 | MarkUs has a submission-view IDOR exposes all student submissions |
| CVE-2024-51743 | MA Markus Markusproject | 8.8 | Nov 18 | MarkUs is a web application for the submission and grading of student assignments |
| CVE-2024-51499 | MA Markus Markusproject | 8.8 | Nov 18 | MarkUs is a web application for the submission and grading of student assignments |
| CVE-2024-47820 | MA Markus Markusproject | 3.5 | Nov 18 | MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8 |