PT-2020-13353

Name of the Vulnerable Software and Affected Versions Open edX Studio version 2.5 Description The issue allows CSV injection because an added cohort in CourseInstructorCohorts may contain a formula that is exported via the "CourseData DownloadsReportsDownload profile info" feature. Recommendation...