CVE-2015-5601

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files

published July 29, 2019

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01490 · 73.9th percentile
Published
2019-07-29T15:41Z
EPSS history
Timeline
  • 29 JUL 15:41Z
    edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files
    cvelistv5