Putongoj · Putongoj · CVE-2024-48920
**Name of the Vulnerable Software and Affected Versions**
PutongOJ versions prior to 2.1.0-beta.1
**Description**
PutongOJ is online judging software. Unprivileged users can escalate privileges by constructing requests, leading to unauthorized access and enabling users to perform admin-level operations. This can potentially compromise sensitive data and system integrity.
**Recommendations**
For versions prior to 2.1.0-beta.1, upgrade to version 2.1.0-beta.1 or later to fix the issue.
As a temporary workaround, apply the patch from commit `211dfe9` manually to secure systems from unauthorized access risks.