openedx-platform vulnerabilities

2 known vulnerabilities in openedx-platform from Openedx. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  openedx-platform: Missing Authorization

  CVE-2026-53635Sep 2, 2026Openedx

  Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function set_course_mode_price() at lms/djangoapps/instructor/views/instructor_dashboard.py:430 is decorated only with @login_required and p

• 9.9 Critical severity

  openedx-platform: Server-Side Request Forgery

  CVE-2026-42858May 11, 2026Openedx

  Open edX Platform enables the authoring and delivery of online learning at any scale. The sync_provider_data endpoint in SAMLProviderDataViewSet allows authenticated Enterprise Admin users to supply an arbitrary URL via the metadata_url POST parameter. This UR