Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Edx Component: Open Edx Platform Clear all filters
TI-2020-10330 CVE-2020-13146 · GHSA-55p9-927h-wfvq

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in…

Priority MEDIUM 40

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Course>Data Downloads>Reports>Download profile info" feature.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0109 Published 2020-05-18 No fix listed CWE-1236
TI-2020-10328 CVE-2020-13144 · GHSA-hc63-fv38-p9mv

Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the…

Priority MEDIUM 51

Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>New subsection>New unit>Add new component>Problem button>Advanced tab>Custom Python evaluated code" sc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.10963 Published 2020-05-18 No fix listed CWE-862