Lucene search
PRIOn knowledge basePRION:CVE-2015-2186HistoryFeb 03, 2018 - 3:29 p.m.
Design/Logic Flaw
2018-02-0315:29:00
PRIOn knowledge base
www.prio-n.com
3
The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string literal “False” instead of a boolean False for the CORS_ORIGIN_ALLOW_ALL setting. Note: this vulnerability was fixed on 2015-03-06, but the version number was not changed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| configuration | le | 1.0 | |
| edx-platform | le | 1.6.0 |
Related
cve
cve
CVE-2015-2186
2018-02-03 15:29:00
cvelist
cvelist
CVE-2015-2186
2018-02-03 00:00:00
nvd
nvd
CVE-2015-2186
2018-02-03 15:29:00