Description
Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Course>Data Downloads>Reports>Download profile info" feature.
Unscored
CVE-2020-13146
EUVD-2020-5422GHSA-55p9-927h-wfvq
Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exp…
Published May 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre