Skip to content
OpenAdvisories

Product · openedx

edx-platform

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-47942

    Learners on edX Platform can download python_lib.zip

    The Open edX Platform is a learning management platform. Prior to commit 6740e75c0fdc7ba095baf88e9f5e4f3e15cfd8ba, edxapp has no built-in protection against downloading the python_lib.zip asset from courses, which is a concern since it often contains custom g…

    openedx edx-platform
  • Medium 5.3
    CVE-2024-41806

    Open edX Platform's instructor upload CSV for cohort creation not Private by Default

    The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information to create cohorts in the instructor dashboard. These files are uploaded using the django default storage. With certain storage backends, u…

    openedx edx-platform
  • Medium 6.4
    CVE-2024-22209

    XBlock custom auth does not respect JWT Scopes

    Open edX Platform is a service-oriented platform for authoring and delivering online learning. A user with a JWT and more limited scopes could call endpoints exceeding their access. This vulnerability has been patched in commit 019888f.

    openedx edx-platform