VYPR

QTIWorks Engine

by QTIWorks

CVEs (1)

  • CVE-2022-39367HigOct 28, 2022
    risk 0.00cvss 8.6epss 0.01

    QTIWorks is a software suite for standards-based assessment delivery. Prior to version 1.0-beta15, the QTIWorks Engine allows users to upload QTI content packages as ZIP files. The ZIP handling code does not sufficiently check the paths of files contained within ZIP files, so…