openedx Summary

Latest vulnerabilities published by openedx

JSON RSS CSV 🔔 Create Alert Trigger

11 May 2026

Improper Input Validation in Open edX Enterprise Service Application
CVE-2026-42860
OpenedxEdx-enterprise8.5HIGH
CSS Injection Vulnerability in Open edX Platform by Open edX
CVE-2026-42857
OpenedxOpenedx-platform4.6MEDIUM
Remote Code Execution Vulnerability in Open edX Platform Affecting Enterprise Admin Users
CVE-2026-42858
OpenedxOpenedx-platform8.5HIGH

6 April 2026

Open edX Platform Vulnerability in URL Redirection Logic
CVE-2026-35404
OpenedxOpenedx-platform4.7MEDIUM

2 April 2026

Unauthenticated Access Vulnerability in Open edX Platform by Open edX
CVE-2026-34736
OpenedxOpenedx-platform5.3MEDIUM

16 December 2025

Access Control Vulnerability in Open edX Platform
CVE-2025-68270
OpenedxEdx-platform9.9CRITICAL

21 May 2025

File Download Vulnerability in Open edX Learning Management Platform
CVE-2025-47942
OpenedxEdx-platform5.3MEDIUM

23 August 2024

Validation of Translations in Open edX Repositories
CVE-2024-43782
OpenedxOpenedx-translations9.8CRITICAL

25 July 2024

Securing Cohort Data Uploads to AWS S3 Buckets
CVE-2024-41806
OpenedxEdx-platform5.3MEDIUM

13 January 2024

XBlock custom auth does not respect JWT Scopes
CVE-2024-22209
OpenedxEdx-platform6.4MEDIUM

26 January 2023

xblock-lti-consumer contain Missing Authorization in Grade Pass Back Implementation
CVE-2023-23611
OpenedxXblock-lti-consumer5.4MEDIUM

28 November 2022

Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields
CVE-2022-46147
OpenedxXblock-drag-and-drop-v28.4HIGH