Product by Openedx

    Openedx-platform

    10 known vulnerabilities in Openedx-platform (Openedx), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Openedx-platform (Openedx)
    CriticalCVE-2026-42858

    Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint

    also in 1 other product

    		9.9
    HighCVE-2026-53635

    Open edX Platform: Insufficient Permission on set_course_mode_price()

    		7.6
    MediumCVE-2026-55421

    Open edX Platform: SSRF in Studio Video Download Endpoint

    		6.8
    MediumCVE-2026-85271

    Openedx-platform: Cross-site Scripting

    		6.1
    MediumCVE-2026-85272

    Open edX Platform: Path traversal via prefix-bypass in safe_extractall Path Validation

    		4.3
    MediumCVE-2026-97702

    Openedx-platform: Observable Response Discrepancy

    		5.3
    MediumCVE-2026-53636

    Open edX LTI OAuth Replay Attack

    		4.7
    MediumCVE-2026-42857

    Open edX Platform: Stored CSS Injection in Email Notifications via Incomplete HTML Sanitization

    also in 1 other product

    		5.4
    MediumCVE-2026-34736

    Open edX Platform: Account Activation Bypass via activation_key Exposure in REST API

    		5.3
    MediumCVE-2026-35404

    Open edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameter

    also in 1 other product

    		4.7

    All products by Openedx