CVE-2020-13146: Improper Neutralization of Formula Elements in a CSV File

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in CourseInstructorCohorts may contain a formula that is exported via the "CourseData DownloadsReportsDownload profile info" feature...

PT-2020-13353

Name of the Vulnerable Software and Affected Versions Open edX Studio version 2.5 Description The issue allows CSV injection because an added cohort in CourseInstructorCohorts may contain a formula that is exported via the "CourseData DownloadsReportsDownload profile info" feature. Recommendation...