CVE-2020-13144

CVE-2020-13144 affects Open edX Ironwood 2.5 Studio. When CodeJail is not enforced, an authenticated user can navigate to Create New course > New section > New subsection > New unit > Add new component > Problem > Advanced > Custom Python evaluated code, edit a problem and ex...

CVE-2019-20513

Open edX Ironwood.1 allows support/certificates?user= reflected XSS...

CVE-2019-20513

Open edX Ironwood.1 allows support/certificates?user= reflected XSS...

Cross site scripting

Open edX Ironwood.1 allows support/certificates?user= reflected XSS...

CVE-2019-20513

Open edX Ironwood.1 allows support/certificates?user= reflected XSS...

CVE-2019-20513

Open edX Ironwood.1 is affected by a reflected XSS in the certificates flow, triggered by the parameter user in the URL (…?user=…). The issue arises from insufficient input validation in the web application, allowing an attacker-supplied payload to be reflected in the client context. Impact is sc...

CVE-2019-20512

Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...

CVE-2019-20512

Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...

Cross site scripting

Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...

CVE-2019-20512

Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...

CVE-2019-20512

The CVE-2019-20512 entry concerns Open edX Ironwood.1, where a reflected XSS flaw is triggered via the course_id parameter in the support/certificates flow. The affected component appears to be the web application handling course resources in Open edX Ironwood.1; the root cause is input from a us...

Open edX platform cross-site scripting vulnerability

The Open edX platform is an open source course management system CMS. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. A cross-site scripting vulnerability exists in versions of Open edX platform prior to 2018-07-18. The vulnerability...

Open edX platform security feature issue vulnerability

The Open edX platform is an open source course management system CMS. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. A security feature issue vulnerability exists in the installation process in versions of Open edX prior to 2017-01-10...

CVE-2017-18381

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials...

CVE-2017-18381

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials...

Default credentials

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials...

CVE-2017-18381

CVE-2017-18381 concerns Open edX installations prior to 2017-01-10, where the installation process exposed a MongoDB instance to external connections using default credentials. This creates a risk of unauthorized access to the database. The connected Red Hat and other vulnerability records corrob...

CVE-2017-18381

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials...

PT-2019-8316 · Edx +1 · Open Edx +1

Name of the Vulnerable Software and Affected Versions: Open edX versions prior to 2017-01-10 Description: The installation process exposes a MongoDB instance to external connections with default credentials. This issue may allow unauthorized access to the database. Recommendations: For versions...

Open edX edx-platform Information Disclosure Vulnerability

Open edX edx-platform is a free and open source course management system CMS created by Harvard University and the Massachusetts Institute of Technology Harvard and MIT. A security vulnerability exists in versions of Open edX edx-platform prior to 2015-08-25. An attacker could exploit the...