CVE-2015-6960

edx-platform before 2015-09-17 allows XSS via a team name...

CVE-2015-6960

edx-platform before 2015-09-17 allows XSS via a team name...

PT-2019-7562

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2016-06-06 Description The issue allows for Cross-Site Request Forgery CSRF attacks. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user ...

PT-2019-7561

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2016-06-10 Description The issue allows account activation with a spoofed e-mail address. Recommendations For versions prior to 2016-06-10, update to a version released after 2016-06-10 to resolve the issue...

PT-2019-7204

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2015-09-17 Description The issue allows for XSS via a team name. Recommendations For versions prior to 2015-09-17, update to a version released after 2015-09-17 to resolve the issue...

PT-2019-7197

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2015-07-20 Description The issue allows code execution by privileged users due to the course import endpoint mishandling .tar.gz files. This affects the course import endpoint, which is vulnerable to code...

PT-2019-7200

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2015-08-17 Description The issue allows for XSS in the Studio listing of courses. Recommendations For versions prior to 2015-08-17, update to a version released after 2015-08-17 to resolve the issue...

CVE-2016-10766: Cross-Site Request Forgery (CSRF)

edx-platform before 2016-06-06 allows CSRF...

CVE-2016-10765: Improper Input Validation

edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address...

CVE-2015-5601: Unrestricted Upload of File with Dangerous Type

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files...

CVE-2015-6253: Improper Neutralization of Input During Web Page Generation

edx-platform before 2015-08-17 allows XSS in the Studio listing of courses...

CVE-2015-6960: Improper Neutralization of Input During Web Page Generation

edx-platform before 2015-09-17 allows XSS via a team name...

Open edX edx-platform Information Disclosure Vulnerability

Open edX edx-platform is a free and open source course management system CMS created by Harvard University and the Massachusetts Institute of Technology Harvard and MIT. A security vulnerability exists in versions of Open edX edx-platform prior to 2015-08-25. An attacker could exploit the...

Information disclosure

Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup...

CVE-2015-6671

Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup...

CVE-2015-6671

Open edX edx-platform pre-2015-08-25 stores SAML SSO secrets in the database, enabling potential exposure of sensitive information via a database backup. The root cause is storage of SAML secrets in the database, which means that if a backup is accessed, context-dependent attackers may obtain sen...

CVE-2015-6671

Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup...

CVE-2015-6671: Exposure of Sensitive Information to an Unauthorized Actor

Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup...

PT-2017-7047

Name of the Vulnerable Software and Affected Versions edx-platform versions prior to 2015-08-25 Description The issue allows context-dependent attackers to obtain sensitive information by leveraging access to a database backup, as the database is used for storage of SAML SSO secrets...

Open edX edx-platform design vulnerability

Open edX edx-platform is a free and open source course management system CMS created by Harvard University and the Massachusetts Institute of Technology Harvard and MIT. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. Open edX...