Description
edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name.
Unscored
CVE-2017-18380
EUVD-2017-9496GHSA-wpqp-m96m-3rw2
edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlle…
Published Jul 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre