CVE-2020-13121: Rcos Submitty

Medium severity, CVSS 6.1. EPSS: 2.9% chance of exploitation in the next 30 days.

Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.

Affected products

• Rcos Submitty: up to and including 20.04.01

Published 2020-05-16. Last modified 2026-06-17.