CVE-2022-41956

CVE-2022-41956 is a file disclosure vulnerability in Autolab, a course management service, affecting versions prior to 2.10.0. This flaw allows authenticated users to submit assignments using paths outside their designated submission directory, subsequently enabling them to view the contents of arbitrary files on the server. With a CVSS score of 6.5 (Medium), the vulnerability has a network attack vector and low attack complexity, potentially leading to high confidentiality impact. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.