CVE-2023-43194: Rcos Submitty

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.

Affected products

• Rcos Submitty: version 22.06.00 only

Published 2023-11-02. Last modified 2026-06-17.