High severity7.5NVD Advisory· Published Jul 30, 2019· Updated Jun 17, 2026
CVE-2017-18380
CVE-2017-18380
Description
edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name.
Affected products
3cpe:2.3:a:edx:edx-platform:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:edx:edx-platform:*:*:*:*:*:*:*:*range: <2017-08-03
- (no CPE)range: <2017-08-03
- edx-platform/edx-platformdescription
Patches
Vulnerability mechanics
References
2- github.com/edx/edx-platform/pull/15773nvdPatchThird Party Advisory
- groups.google.com/forum/nvd
News mentions
0No linked articles in our index yet.