Skip to content
OpenAdvisories

Product · openedx

openedx-platform

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-53635

    Open edX Platform: Insufficient Permission on set_course_mode_price()

    Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function set_course_mode_price() at lms/djangoapps/instructor/views/instructor_dashboard.py:430 is decorated only with @login_required and …

    openedx openedx-platform
  • High 8.5
    CVE-2026-42858

    Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint

    Open edX Platform enables the authoring and delivery of online learning at any scale. The sync_provider_data endpoint in SAMLProviderDataViewSet allows authenticated Enterprise Admin users to supply an arbitrary URL via the metadata_url POST parameter. This U…

    openedx openedx-platform