CVE-2024-27612

Numbas editor before 7.3 mishandles editing of themes and extensions.

CVSS v3.1 CNA

6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

10.71% chance of exploitation in the next 30 days, 96th percentile

Published

2024-03-08

Updated

2025-03-24

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51867

Security advisories

• numbas/Numbas
• https://www.numbas.org.uk/blog/2024/03/development-update-march-2024

References

• CVE Record
• NVD entry