| Package | Affected versions | Patched versions |
|---|---|---|
| edx-platform | < 2015-07-20 | 2015-07-20 |
edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free