Approved changes feed: RSS · Atom

cpe:2.3:a:autolabproject:autolab:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorAutolabproject (885144bc-cf0e-5de6-8621-51ead702e31f)
ProductAutolab (6ba40d78-e4e0-5060-9f4e-480860a9b9d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/15-411/autolab purl2cpe 2026-06-01 10:18:10.824901
pkg:github/autolab/autolab purl2cpe 2026-06-01 10:18:10.824903
pkg:github/uncc-autolab/autolab purl2cpe 2026-06-01 10:18:10.824904

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49376 vulnerable 2026-06-08 06:50:13.737716 Autolab Has Misconfigured Reset Password Permissions
Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords. This issue is fixed in version 3.0.1. No known workarounds exist.
Published: 2024-10-25T12:50:33.130Z
Updated: 2024-10-25T15:05:44.274Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.