CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Cvelist•added 2020/05/18 6:24 p.m.•37 views

CVE-2020-13146

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in CourseInstructorCohorts may contain a formula that is exported via the "CourseData DownloadsReportsDownload profile info" feature...

8.8AI score0.0109EPSS

SaveExploits1References1

Positive Technologies•added 2020/05/18 12:00 a.m.•8 views

PT-2020-13353

Name of the Vulnerable Software and Affected Versions Open edX Studio version 2.5 Description The issue allows CSV injection because an added cohort in CourseInstructorCohorts may contain a formula that is exported via the "CourseData DownloadsReportsDownload profile info" feature. Recommendation...

8.8CVSS0.0109EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2020/05/18 12:00 a.m.•10 views

CVE-2020-13146: Improper Neutralization of Formula Elements in a CSV File

8.8CVSS7.8AI score0.0109EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by