Lucene search
PRIOn knowledge basePRION:CVE-2015-2286HistoryMar 19, 2016 - 10:59 a.m.
Default credentials
2016-03-1910:59:00
PRIOn knowledge base
www.prio-n.com
3
lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by reading a referer log after a victim navigates from this page to a social-sharing site.
| CPE | Name | Operator | Version |
|---|---|---|---|
| open_edx | eq | <= 2015127 |
Related
cve
cve
CVE-2015-2286
2016-03-19 10:59:00
nvd
nvd
CVE-2015-2286
2016-03-19 10:59:00
cvelist
cvelist
CVE-2015-2286
2016-03-19 10:00:00