Approved changes feed: RSS · Atom

cpe:2.3:a:qingdaou:onlinejudge:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQingdaou (e1424ee8-784a-57e3-922f-ccddc91c356f)
ProductOnlinejudge (63be76dc-8fdc-593f-8f9c-87019950af99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5538 vulnerable 2026-06-08 08:07:03.809501 QingdaoU OnlineJudge judge_server_heartbeat Endpoint JudgeServer.service_url server-side request forgery
MEDIUM (6.3)
A vulnerability was detected in QingdaoU OnlineJudge up to 1.6.1. Affected by this issue is the function service_url of the file JudgeServer.service_url of the component judge_server_heartbeat Endpoint. The manipulation results in server-side request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-05T03:15:15.703Z
Updated: 2026-04-06T16:34:01.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.