Open Edx

open_edx

Vendor: Edx • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-32195 1Edx 1Open Edx Jun 17, 2026 Jun 9, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.
CVE-2019-20513 1Edx 1Open Edx Jun 17, 2026 Mar 19, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Open edX Ironwood.1 allows support/certificates?user= reflected XSS.
CVE-2015-2286 1Edx 1Open Edx May 6, 2026 Mar 19, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by r...Show more lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by reading a referer log after a victim navigates from this page to a social-sharing site.Show less