Inducer - vulnerabilities (CVEs)

8 CVEs in 1 products, 0 in the last 30 days, newest from 2026-05-27.

Products

• Relate - 5 CVEs

Newest CVEs of Inducer

• CVE-2026-47161 - CVSS 8.7 (high), 2026-05-27: RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and…
• CVE-2026-42197 - CVSS 8.7 (high), 2026-05-27: RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability…
• CVE-2026-41588 - CVSS 9 (critical), 2026-05-08: RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue…
• CVE-2026-41505 - CVSS 8.7 (high), 2026-05-07: RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's make_sign_in_key()…
• CVE-2024-32406 - CVSS 7.5 (high), 2024-04-26: Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload…
• CVE-2024-32404 - CVSS 6 (medium), 2024-04-26: Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload…
• CVE-2024-32405 - CVSS 2.6 (low), 2024-04-22: Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field…
• CVE-2024-32407 - CVSS 8.8 (high), 2024-04-22: An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature.