CVE-2018-20859

2019-07-3019:15:12

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.

CPENameOperatorVersion
edx-platformeqhotfix-2016-03-17
edx-platformeqpatch-2016-04-14
edx-platformeqhotfix-2014-01-16
edx-platformeqprod-pre-storage-model
edx-platformeqrelease-2018-02-08-10.43
edx-platformeqhotfix-2015-12-09-a
edx-platformeqrelease-2016-03-08
edx-platformeqrelease-2017-11-09-12.30
edx-platformeq2.0.3
edx-platformeqrelease-2017-05-02-10.39

Name	Operator	Version
edx-platform	eq	hotfix-2016-03-17
edx-platform	eq	patch-2016-04-14
edx-platform	eq	hotfix-2014-01-16
edx-platform	eq	prod-pre-storage-model
edx-platform	eq	release-2018-02-08-10.43
edx-platform	eq	hotfix-2015-12-09-a
edx-platform	eq	release-2016-03-08
edx-platform	eq	release-2017-11-09-12.30
edx-platform	eq	2.0.3
edx-platform	eq	release-2017-05-02-10.39