edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.

Published Jul 29, 2019 · Updated Aug 6, 2024 · Assigned by mitre