Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-2186
5
MEDIUMCVSS v2
Published
February 3, 2018
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string literal "False" instead of a boolean False for the CORS_ORIGIN_ALLOW_ALL setting. Note: this vulnerability was fixed on 2015-03-06, but the version number was not changed.
openedx-unsupported/configuration
GitHubA collection of edx configuration scripts and utilities that edx.org uses to deploy openedx.
GitHubA collection of edx configuration scripts and utilities that edx.org uses to deploy openedx.<= 1.0NVD
edx/configurationGitHubA collection of edx configuration scripts and utilities that edx.org uses to deploy openedx.
GitHubA collection of edx configuration scripts and utilities that edx.org uses to deploy openedx.<= 1.0NVD