6 matches found
Cross site scripting
Open edX Ironwood.1 allows support/certificates?user= reflected XSS...
PT-2020-10489
Name of the Vulnerable Software and Affected Versions Open edX Ironwood.1 Description The issue allows for reflected XSS, specifically through the support/certificates?user= endpoint. This can potentially lead to malicious script execution. Recommendations For Open edX Ironwood.1, as a temporary...
CVE-2019-20513: Improper Neutralization of Input During Web Page Generation
Open edX Ironwood.1 allows support/certificates?user= reflected XSS...
CVE-2019-20512
Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...
PT-2020-10488
Name of the Vulnerable Software and Affected Versions Open edX Ironwood.1 Description The issue allows for reflected XSS when the course id parameter is used in the support/certificates endpoint. Recommendations For Open edX Ironwood.1, consider restricting access to the support/certificates...