Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Edx\-Platform
(Edx)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 12 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2019-07-29 | CVE-2015-5601 | edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files. | Edx\-Platform | 8.8 | ||
| 2018-02-03 | CVE-2015-2186 | The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string literal "False" instead of a boolean False for the CORS_ORIGIN_ALLOW_ALL setting. Note: this vulnerability was fixed on 2015-03-06, but the version number was not changed. | Configuration, Edx\-Platform | 7.5 |