Inducer

8 CVEs across 1 Inducer products. Browse Inducer vulnerabilities, severities, and proof-of-concept exploits.

Inducer products with known CVEs

ProductCVEs
Relate8
Inducer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-471612026-05-27RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and dese…
CVE-2026-42197High8.72026-05-27RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability th…
CVE-2026-41588Critical9.02026-05-08RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue h…
CVE-2026-41505High8.72026-05-07RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's make_sign_in_key() functio…
CVE-2024-32406High7.52024-04-26Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload…
CVE-2024-32404Medium6.02024-04-26Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload…
CVE-2024-32405Low2.62024-04-22Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field…
CVE-2024-32407High8.82024-04-22An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature.