CVE-2023-37468

Feedbacksystem is a personalized feedback system for students using artificial intelligence. Passwords of users using LDAP login are stored in clear text in the database. The LDAP users password is passed unencrypted in the LoginController.scala and stored in the database when logging in for the first time. Users using only local login or the cas login are not affected. This issue has been patched in version 1.19.2.

• CWE-312

• https://github.com/thm-mni-ii/feedbacksystem/commit/8d896125263e1efb1b70990987c7704426325bcfPatch
• https://github.com/thm-mni-ii/feedbacksystem/releases/tag/v1.9.2Release Notes
• https://github.com/thm-mni-ii/feedbacksystem/security/advisories/GHSA-g28r-8wg3-7349Vendor Advisory
• https://github.com/thm-mni-ii/feedbacksystem/commit/8d896125263e1efb1b70990987c7704426325bcfPatch
• https://github.com/thm-mni-ii/feedbacksystem/releases/tag/v1.9.2Release Notes
• https://github.com/thm-mni-ii/feedbacksystem/security/advisories/GHSA-g28r-8wg3-7349Vendor Advisory

Published

Jul 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37461Metersphere is an opensource testing framework. Files upload…9.8
• CVE-2023-37462XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-37463cmark-gfm is an extended version of the C reference implemen…7.5
• CVE-2023-37464OpenIDC/cjose is a C library implementing the Javascript Obj…7.5
• CVE-2023-37466vm2 is an advanced vm/sandbox for Node.js. The library conta…10
• CVE-2023-37467Discourse is an open source discussion platform. Prior to ve…5.4
• CVE-2023-37469CasaOS is an open-source personal cloud system. Prior to ver…8.8
• CVE-2023-3747Zero Trust Administrators have the ability to disallow end u…5.5
• CVE-2023-37470Metabase is an open-source business intelligence and analyti…9.8
• CVE-2023-37471Open Access Management (OpenAM) is an access management solu…9.8
• CVE-2023-37472Knowage is an open source suite for business analytics. The …6.5
• CVE-2023-37473zenstruck/collections is a set of helpers for iterating/pagi…8.8