CVE-2015-5601 edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.
HighCVSS 8.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| edx-platform | < 2015-07-20 | 2015-07-20 |
References
- open.edx.org patch vendor-advisory