Approved changes feed: RSS · Atom

cpe:2.3:a:acm309:putongoj:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAcm309 (62a79d8d-7252-553e-b267-3bb1aa42fdd8)
ProductPutongoj (e43d19b2-8758-5e00-8305-dbdf906b98a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48920 vulnerable 2026-06-03 14:57:11.057931 PutongOJ: unprivileged users can escalate privileges by constructing requests
CRITICAL (9.1)
PutongOJ is online judging software. Prior to version 2.1.0-beta.1, unprivileged users can escalate privileges by constructing requests. This can lead to unauthorized access, enabling users to perform admin-level operations, potentially compromising sensitive data and system integrity. This problem has been fixed in v2.1.0.beta.1. As a workaround, one may apply the patch from commit `211dfe9` manually.
Published: 2024-10-17T14:24:08.417Z
Updated: 2024-10-17T16:11:05.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.