Unrated

edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain na...

CVE-2017-18380 First seen on SecPulse Jul 30, 2019

Original description The description as published by the source.

edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
web groups.google.com

Key facts

Severity: Unrated
Published: Jul 30, 2019
First seen on SecPulse: Jul 30, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:48