CVE-2024-27613 - Vulnerability Details - OpenCVE

Numbas editor before 7.3 mishandles reading of themes and extensions.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Numbas	Numbas

Configuration 1 [-]

cpe:2.3:a:numbas:numbas:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/numbas/Numbas
https://www.numbas.org.uk/blog/2024/03/development-update-march-2024/

History

Sat, 29 Mar 2025 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-20

Wed, 12 Mar 2025 13:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Numbas Numbas numbas
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:a:numbas:numbas::::::::
Vendors & Products		Numbas Numbas numbas
Metrics		cvssV3_1 `{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-03-08T00:00:00.000Z

Updated: 2025-03-28T23:43:35.952Z

Reserved: 2024-02-26T00:00:00.000Z

Link: CVE-2024-27613

Vulnrichment

Updated: 2024-08-02T00:34:52.479Z

NVD

Status : Undergoing Analysis

Published: 2024-03-08T06:15:52.820

Modified: 2025-03-29T00:15:19.533

Link: CVE-2024-27613

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:numbas:numbas:*:*:*:*:*:*:*:*", "matchCriteriaId": "DBCF4F35-8670-48F4-AD8B-D6B9F80251C1", "versionEndExcluding": "7.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Numbas editor before 7.3 mishandles reading of themes and extensions."}, {"lang": "es", "value": "El editor de Numbas anterior a 7.3 maneja mal la lectura de temas y extensiones."}], "id": "CVE-2024-27613", "lastModified": "2025-03-29T00:15:19.533", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "[email protected]", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-03-08T06:15:52.820", "references": [{"source": "[email protected]", "tags": ["Product"], "url": "https://github.com/numbas/Numbas"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "https://www.numbas.org.uk/blog/2024/03/development-update-march-2024/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://github.com/numbas/Numbas"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://www.numbas.org.uk/blog/2024/03/development-update-march-2024/"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}