Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

assessment-placipy — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in assessment-placipy, with AI-generated Chinese analysis, references, and POCs.

Vendor: Praskla-Technology

CVE IDTitleCVSSSeverityPublished
CVE-2026-25875 PlaciPy Admin Privilege Escalation via Trusted JWT Claims CWE-863 6.5AIMediumAI2026-02-09
CVE-2026-25814 NoSQL Injection Risk via Unsanitized Query Parameters CWE-74 7.1AIHighAI2026-02-09
CVE-2026-25813 PlaciPy Exposes Sensitive Data via Application Logs CWE-532 7.5AIHighAI2026-02-09
CVE-2026-25812 PlaciPy is Missing CSRF Protection on State-Changing Endpoints CWE-352 6.5AIMediumAI2026-02-09
CVE-2026-25811 PlaciPy Email Domain Trust Enables Cross-Tenant Data Access (Multi-Tenant Isolation Failure) CWE-863 4.3AIMediumAI2026-02-09
CVE-2026-25809 PlaciPy Code Execution Allowed Without Assessment Active State Validation CWE-285 9.8AICriticalAI2026-02-09
CVE-2026-25806 PlaciPy has Missing Authorization Checks on Student Management Endpoints (IDOR) CWE-862 9.1AICriticalAI2026-02-09
CVE-2026-25810 PlaciPy is Missing Object-Level Authorization in student.submission.routes.ts CWE-862 9.1AICriticalAI2026-02-09
CVE-2026-25876 PlaciPy is Missing Authorization on Assessment Results Endpoint CWE-862 7.5AIHighAI2026-02-09
CVE-2026-25753 PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover) CWE-259 9.8AICriticalAI2026-02-06

All 10 known CVE vulnerabilities affecting assessment-placipy with full Chinese analysis, references, and POCs where available.