Skip to content
OpenAdvisories

Product · openedx

edx-enterprise

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2026-42860

    Open edx Enterprise Service: SSRF via SAML metadata URL in sync_provider_data endpoint

    The Open edx Enterprise Service app provides enterprise features to the Open edX platform. From 7.0.2 to 7.0.4, the sync_provider_data endpoint in SAMLProviderDataViewSet fetches SAML metadata from a URL stored in SAMLProviderConfig.metadata_source. An authen…

    openedx edx-enterprise edx-enterprise PyPI