CVE-2016-10766

2019-07-2917:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

edx-platform before 2016-06-06 allows CSRF.

CPENameOperatorVersion
edx-platformeqhotfix-2016-03-17
edx-platformeqpatch-2016-04-14
edx-platformeqhotfix-2014-01-16
edx-platformeqprod-pre-storage-model
edx-platformeqhotfix-2015-12-09-a
edx-platformeqrelease-2016-03-08
edx-platformeqhotfix-2015-06-29
edx-platformeqpatch-2015-12-21
edx-platformeqhotfix-2015-05-29b
edx-platformeqhotfix-2014-11-21

Name	Operator	Version
edx-platform	eq	hotfix-2016-03-17
edx-platform	eq	patch-2016-04-14
edx-platform	eq	hotfix-2014-01-16
edx-platform	eq	prod-pre-storage-model
edx-platform	eq	hotfix-2015-12-09-a
edx-platform	eq	release-2016-03-08
edx-platform	eq	hotfix-2015-06-29
edx-platform	eq	patch-2015-12-21
edx-platform	eq	hotfix-2015-05-29b
edx-platform	eq	hotfix-2014-11-21