critical9.9
CVE-2018-16367
In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere.
Impact
In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qduoj | Onlinejudge | Version 2.0 |