Edx

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Edx records in CISA KEV

No Edx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Edx-platform 12 records MEDIUM Open Edx 3 records LOW Open Edx Platform 3 records MEDIUM Configuration 1 record LOW Recommender 1 record LOW

Records

1 record in Configuration · all components

TI-2015-01949 CVE-2015-2186 · GHSA-hxqf-qqgc-653f

The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof…

LOW 35

The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string literal "False" instead of a boolean False for the CORS_ORIGIN_ALLOW_ALL setting.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0111 Published 2018-02-03 No fix listed CWE-20

Open these records in search →

Critical	0
High	8
Medium	11
Low	0
No CVSS	0