Code injection

2019-07-2916:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.1%

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.

CPENameOperatorVersion
edx-platformeq< 2015720

CPE	Name	Operator	Version
	edx-platform	eq	< 2015720

References

open.edx.org/announcements/CVE-2015-5601