CVE-2015-10040

MEDIUM 6.5CVE-2015-10040 · Published 13/01/2023 · updated 17/06/2026

In short

CVE-2015-10040 is a MEDIUM (CVSS 6.5) vulnerability affecting gitlearn (gitlearn project).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.8% of all vulnerabilities.
Fix: update to 2015-06-09 or later.

Package	Affected versions	Patched versions
gitlearn gitlearn_project	`< 2015-06-09`	`2015-06-09`

Description

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is identified as 3faa5deaa509012069afe75cd03c21bda5050a64. It is recommended to apply a patch to fix this issue. VDB-218302 is the identifier assigned to this vulnerability.

References

mikeizbicki/gitlearn commit 3faa5de · Patch
mikeizbicki/gitlearn#31 · Exploit
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free