Vendor/product archive

edx / open_edx CVEs

Beta · best-effort

3 CVEs tagged to edx / open_edx — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to edx vendor archive

CVE-2022-32195

Published Jun 9, 2022

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-20513

Published Mar 19, 2020

Open edX Ironwood.1 allows support/certificates?user= reflected XSS.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-2286

Published Mar 19, 2016

lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attacke…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1