CVE-2021-39248

2021-08-1721:15:06

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.

CPENameOperatorVersion
edx-platformeqrelease-2016-11-16
edx-platformeqhotfix-2014-11-21
edx-platformeqrelease-2017-10-13-13.32
edx-platformeqrelease-2021-02-08-14.41
edx-platformeqrelease-2021-03-15-17.46
edx-platformeqrelease-2023-01-26-03.13
edx-platformeqrelease-2022-04-07-18.56
edx-platformeqrelease-2021-04-12-15.24
edx-platformeqrelease-2021-09-27-15.14
edx-platformeqrelease-2022-05-19-15.29

Name	Operator	Version
edx-platform	eq	release-2016-11-16
edx-platform	eq	hotfix-2014-11-21
edx-platform	eq	release-2017-10-13-13.32
edx-platform	eq	release-2021-02-08-14.41
edx-platform	eq	release-2021-03-15-17.46
edx-platform	eq	release-2023-01-26-03.13
edx-platform	eq	release-2022-04-07-18.56
edx-platform	eq	release-2021-04-12-15.24
edx-platform	eq	release-2021-09-27-15.14
edx-platform	eq	release-2022-05-19-15.29

Rows per page:

1-10 of 45531

References

github.com/edx/edx-platform/pull/28379