RSS   Podatności dla 'Edx-platform'   RSS

2021-08-17
 
CVE-2021-39248

CWE-79
 
 
Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.

 
2018-02-03
 
CVE-2015-2186

CWE-20
 
 
The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string literal "False" instead of a boolean False for the CORS_ORIGIN_ALLOW_ALL setting. Note: this vulnerability was fixed on 2015-03-06, but the version number was not changed.

 

 >>> Vendor: EDX 5 Produkty
Open edx
Edx-platform
Configuration
Recommender
Open edx platform

Copyright 2024, cxsecurity.com

 

Back to Top