Security Advisory

CVE-2020-13146

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-18 18:24:10

Last updated 2024-08-04 12:11:19

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Course>Data Downloads>Reports>Download profile info" feature.

← Browse all CVEs View on cve.org ↗