Known Vulnerabilities
CVE-2021-40691
A session hijack risk was identified in the Shibboleth authentication plugin.
UNKNOWN
Published Jan 21, 2022
CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service.
UNKNOWN
Published Jan 21, 2022
CVE-2021-40693
An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability.
UNKNOWN
Published Jan 21, 2022
CVE-2021-40692
Insufficient capability checks made it possible for teachers to download users outside of their courses.
UNKNOWN
Published Jan 21, 2022
CVE-2021-40694
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
UNKNOWN
Published Jan 21, 2022