Lucene search
PRIOn knowledge basePRION:CVE-2020-13144HistoryMay 18, 2020 - 7:15 p.m.
Code injection
2020-05-1819:15:00
PRIOn knowledge base
www.prio-n.com
2
Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the “Create New course>New section>New subsection>New unit>Add new component>Problem button>Advanced tab>Custom Python evaluated code” screen, edit the problem, and execute Python code. This leads to arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| open_edx_platform | eq | 2.5 |
Related
packetstorm
packetstorm
OpenEDX Ironwood 2.5 Remote Code Execution
2020-05-20 00:00:00
nvd
nvd
CVE-2020-13144
2020-05-18 19:15:11
cvelist
cvelist
CVE-2020-13144
2020-05-18 18:23:55
zdt
zdt
OpenEDX platform Ironwood 2.5 - Remote Code Execution Vulnerability
2020-05-21 00:00:00
cve
cve
CVE-2020-13144
2020-05-18 19:15:11
0daydb
0daydb
PHP-Fusion 9.03.50 - Cross Site Scripting
2020-05-24 15:24:42
OpenEDX Ironwood 2.5 CVE-2020-13144 - Remote Code Execution
2020-05-24 15:29:52
WebLogic Server CVE-2020-2555 - Remote Code Execution
2020-05-24 15:30:56
exploitdb
exploitdb
OpenEDX platform Ironwood 2.5 - Remote Code Execution
2020-05-21 00:00:00