Read the docs

Edx

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Edx records in CISA KEV

No Edx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Edx-platform 12 records MEDIUM Open Edx 3 records LOW Open Edx Platform 3 records MEDIUM Configuration 1 record LOW Recommender 1 record LOW

Records

3 records in Open Edx Platform · all components

TI-2020-10328 CVE-2020-13144 · GHSA-hc63-fv38-p9mv

Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the…

Priority MEDIUM 51

Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>New subsection>New unit>Add new component>Problem button>Advanced tab>Custom Python evaluated code" sc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.10963 Published 2020-05-18 No fix listed CWE-862
TI-2020-10330 CVE-2020-13146 · GHSA-55p9-927h-wfvq

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in…

Priority MEDIUM 40

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Course>Data Downloads>Reports>Download profile info" feature.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0109 Published 2020-05-18 No fix listed CWE-1236
Open these records in search →