CVE-2015-10040

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is identified as 3faa5deaa509012069afe75cd03c21bda5050a64. It is recommended to apply a patch to fix this issue. VDB-218302 is the identifier assigned to this vulnerability.

• CWE-74
• CWE-116

• https://github.com/mikeizbicki/gitlearn/commit/3faa5deaa509012069afe75cd03c21bda5050a64Patch, Third Party Advisory
• https://github.com/mikeizbicki/gitlearn/pull/31Exploit, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.218302Third Party Advisory
• https://vuldb.com/?id.218302Third Party Advisory
• https://github.com/mikeizbicki/gitlearn/commit/3faa5deaa509012069afe75cd03c21bda5050a64Patch, Third Party Advisory
• https://github.com/mikeizbicki/gitlearn/pull/31Exploit, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.218302Third Party Advisory
• https://vuldb.com/?id.218302Third Party Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10035A vulnerability was found in gperson angular-test-reporter a…9.8
• CVE-2015-10036A vulnerability was found in kylebebak dronfelipe. It has be…9.8
• CVE-2015-10037A vulnerability, which was classified as critical, was found…9.8
• CVE-2015-10038A vulnerability was found in nym3r0s pplv2. It has been decl…8
• CVE-2015-10039A vulnerability was found in dobos domino. It has been rated…8
• CVE-2015-1004Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-10041** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…9.8
• CVE-2015-10042** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…9.8
• CVE-2015-10043A vulnerability, which was classified as critical, was found…8.8
• CVE-2015-10044A vulnerability classified as critical was found in gopherga…9.8
• CVE-2015-10045A vulnerability, which was classified as critical, was found…9.8
• CVE-2015-10046A vulnerability has been found in lolfeedback and classified…9.8