Cpe:2.3:a:markusproject:markus:*:*:*:*:*:*:*:*

An authenticated instructor-level user can exploit a Zip Slip vulnerability in MarkUs assignment configuration uploads to write arbitrary files and achieve remote code execution.