Multiple Reflected Cross-site Scripting Vulnerabilities in OpenEdx version Ironwood.1
Daniel Bishtawi <[email protected]> Tue, 10 Sep 2019 10:56:49 +0200
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.news.securitytracker |
|---|---|
| Message-ID | <CAKD6+R721=mo=JVFsL7m-JimWyUa3nbON_1D9BATXuga3sjFPQ@mail.gmail.com> |
SGVsbG8sCgpXZSBhcmUgaW5mb3JtaW5nIHlvdSBhYm91dCB0aGUgdnVsbmVyYWJpbGl0aWVzIGlu IE9wZW5FZHggdmVyc2lvbgpJcm9ud29vZC4xLgoKSGVyZSBhcmUgdGhlIGRldGFpbHM6CgpJbmZv cm1hdGlvbgotLS0tLS0tLS0tLS0tLS0tLS0tLQpBZHZpc29yeSBieSBOZXRzcGFya2VyCk5hbWU6 IE11bHRpcGxlIFJlZmxlY3RlZCBDcm9zcy1zaXRlIFNjcmlwdGluZyBWdWxuZXJhYmlsaXRpZXMg aW4gT3BlbkVkeAp2ZXJzaW9uIElyb253b29kLjEKQWZmZWN0ZWQgU29mdHdhcmU6IE9wZW5FZHgK QWZmZWN0ZWQgVmVyc2lvbnM6IElyb253b29kLjEKSG9tZXBhZ2U6IGh0dHBzOi8vb3Blbi5lZHgu b3JnLwpWdWxuZXJhYmlsaXR5OiBDcm9zcyBzaXRlIFNjcmlwdGluZwpTZXZlcml0eTogTWVkaXVt ClN0YXR1czogRml4ZWQKQ1ZTUyBTY29yZSAoMy4wKTogQVY6Ti9BQzpML1BSOk4vVUk6Ui9TOkMv QzpML0k6TC9BOk4KTmV0c3BhcmtlciBBZHZpc29yeSBSZWZlcmVuY2U6IE5TLTE5LTAxNAoKVGVj aG5pY2FsIERldGFpbHMKLS0tLS0tLS0tLS0tLS0tLS0tLS0KClVSTCA6IGh0dHA6Ly8Ke0RPTUFJ Tn0ve1BBVEgtT0YtT1BFTkVEWH0vc3VwcG9ydC9jZXJ0aWZpY2F0ZXM/Y291cnNlX2lkPSUyNyUy YmFsZXJ0KOKAmHhzc+KAmSklMmIlMjcmcXVlcnk9MyZ1c2VyPTMKUGFyYW1ldGVyIE5hbWUgOiBj b3Vyc2VfaWQKUGFyYW1ldGVyIFR5cGUgOiBHRVQKQXR0YWNrIFBhdHRlcm4gOiAlMjclMmJhbGVy dCjigJh4c3PigJkpJTJiJTI3CgpVUkw6Cmh0dHA6Ly8Ke0RPTUFJTn0ve1BBVEgtT0YtT1BFTkVE WH0vc3VwcG9ydC9jZXJ0aWZpY2F0ZXM/Y291cnNlX2lkPTMmcXVlcnk9MyZ1c2VyPSUyNyUyYmFs ZXJ0KOKAmHhzc+KAmSklMmIlMjcKUGFyYW1ldGVyIE5hbWUgOiB1c2VyClBhcmFtZXRlciBUeXBl IDogR0VUCkF0dGFjayBQYXR0ZXJuIDogJTI3JTJiYWxlcnQo4oCYeHNz4oCZKSUyYiUyNwoKRm9y IG1vcmUgaW5mb3JtYXRpb246Cmh0dHBzOi8vd3d3Lm5ldHNwYXJrZXIuY29tL3dlYi1hcHBsaWNh dGlvbnMtYWR2aXNvcmllcy9ucy0xOS0wMTQtcmVmbGVjdGVkLWNyb3NzLXNpdGUtc2NyaXB0aW5n LWluLW9wZW5lZHgvCgoKUmVnYXJkcywKCkRhbmllbCBCaXNodGF3aQpNYXJrZXRpbmcgQWRtaW5p c3RyYXRvciB8IE5ldHNwYXJrZXIgV2ViIEFwcGxpY2F0aW9uIFNlY3VyaXR5IFNjYW5uZXIKRm9s bG93IHVzIG9uIFR3aXR0ZXIgPGh0dHBzOi8vdHdpdHRlci5jb20vbmV0c3Bhcmtlcj4gfCBMaW5r ZWRJbgo8aHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2NvbXBhbnkvbmV0c3Bhcmtlci1sdGQ+IHwg RmFjZWJvb2sKPGh0dHBzOi8vZmFjZWJvb2suY29tL25ldHNwYXJrZXI+CjxodHRwczovL3d3dy5u ZXRzcGFya2VyLmNvbS9ibG9nL2V2ZW50cy9leGhpYml0aW5nLWdsb2JhbC1hcHBzZWMtZGMtMjAx OS8+CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpTZW50 IHRocm91Z2ggdGhlIEZ1bGwgRGlzY2xvc3VyZSBtYWlsaW5nIGxpc3QKaHR0cHM6Ly9ubWFwLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2Z1bGxkaXNjbG9zdXJlCldlYiBBcmNoaXZlcyAmIFJTUzogaHR0 cDovL3NlY2xpc3RzLm9yZy9mdWxsZGlzY2xvc3VyZS8=