openedx kayıtları
openedx üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %37,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-284 Improper Access Control1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-43782İstismar yok | openedx-translations's Atlas translations for Open edX missing validationopenedx · openedx · CWE-74 | Kritik9,8 | — | %0,5 | 23 Ağu 2024 |
39İzleyin | CVE-2026-42858İstismar yok | Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpointopenedx · openedx · CWE-918 | Kritik9,9 | — | %0,4 | 11 May 2026 |
34İzleyin | CVE-2026-42860İstismar yok | Open edx Enterprise Service: SSRF via SAML metadata URL in sync_provider_data endpointopenedx · edx-enterprise · CWE-918 | Yüksek8,5 | — | %0,3 | 11 May 2026 |
24İzleyin | CVE-2022-46147İstismar yok | Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fieldsopenedx · xblock-drag-and-drop-v2 · CWE-79 | Orta6,1 | — | %0,9 | 28 Kas 2022 |
24İzleyin | CVE-2026-35404İstismar yok | Open edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameteropenedx · openedx · CWE-601 | Orta6,1 | — | %0,3 | 6 Nis 2026 |
21İzleyin | CVE-2023-23611İstismar yok | xblock-lti-consumer contain Missing Authorization in Grade Pass Back Implementationopenedx · xblock-lti-consumer · CWE-862 | Orta5,4 | — | %0,4 | 26 Oca 2023 |
21İzleyin | CVE-2024-41806İstismar yok | Open edX Platform's instructor upload CSV for cohort creation not Private by Defaultopenedx · edx-platform · CWE-284 | Orta5,3 | — | %0,3 | 25 Tem 2024 |
21İzleyin | CVE-2026-42857İstismar yok | Open edX Platform: Stored CSS Injection in Email Notifications via Incomplete HTML Sanitizationopenedx · openedx · CWE-79 | Orta5,4 | — | %0,3 | 11 May 2026 |
- CVE-2024-4378239İzleyin
openedx-translations's Atlas translations for Open edX missing validation
KritikCVSS 9,8İstismar yokEPSS %1openedx · openedx23 Ağu 2024
- CVE-2026-4285839İzleyin
Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint
KritikCVSS 9,9İstismar yokEPSS %0openedx · openedx11 May 2026
- CVE-2026-4286034İzleyin
Open edx Enterprise Service: SSRF via SAML metadata URL in sync_provider_data endpoint
YüksekCVSS 8,5İstismar yokEPSS %0openedx · edx-enterprise11 May 2026
- CVE-2022-4614724İzleyin
Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields
OrtaCVSS 6,1İstismar yokEPSS %1openedx · xblock-drag-and-drop-v228 Kas 2022
- CVE-2026-3540424İzleyin
Open edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameter
OrtaCVSS 6,1İstismar yokEPSS %0openedx · openedx6 Nis 2026
- CVE-2023-2361121İzleyin
xblock-lti-consumer contain Missing Authorization in Grade Pass Back Implementation
OrtaCVSS 5,4İstismar yokEPSS %0openedx · xblock-lti-consumer26 Oca 2023
- CVE-2024-4180621İzleyin
Open edX Platform's instructor upload CSV for cohort creation not Private by Default
OrtaCVSS 5,3İstismar yokEPSS %0openedx · edx-platform25 Tem 2024
- CVE-2026-4285721İzleyin
Open edX Platform: Stored CSS Injection in Email Notifications via Incomplete HTML Sanitization
OrtaCVSS 5,4İstismar yokEPSS %0openedx · openedx11 May 2026