CVE-2017-18380

edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name

published July 30, 2019

CVSS
—
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01079 · 64.8th percentile
Published
2019-07-30T12:30Z
EPSS history
Timeline
  • 30 JUL 12:30Z
    edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name
    cvelistv5