VYPR
← All advisories
Critical severity9.0OSV Advisory· Published Apr 18, 2024· Updated Apr 15, 2026

CVE-2024-29021

CVE-2024-29021

Description

Judge0 is an open-source online code execution system. The default configuration of Judge0 leaves the service vulnerable to a sandbox escape via Server Side Request Forgery (SSRF). This allows an attacker with sufficient access to the Judge0 API to obtain unsandboxed code execution as root on the target machine. This vulnerability is fixed in 1.13.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Judge0/Judge0OSV2 versions
    v0.1.2, v1.0.0, v1.1.0, …+ 1 more
    • (no CPE)range: v0.1.2, v1.0.0, v1.1.0, …
    • (no CPE)range: <1.13.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.