CVE-2023-46404: Utoronto Pcrs

Critical severity, CVSS 9.9. EPSS: 1.9% chance of exploitation in the next 30 days.

PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.

Affected products

• Utoronto Pcrs: up to and including 3.11

Published 2023-11-03. Last modified 2026-06-17.