← Back

Onlinejudge

onlinejudge

Vendor: Qduoj • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-16367
1Qduoj
1Onlinejudge
Nov 21, 2024
Sep 2, 2018
N/A· v4
9.9 CRITICAL· v3
9.0 HIGH· v2
In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include.