Medium severity6.4NVD Advisory· Published Jan 13, 2024· Updated Jun 17, 2026

CVE-2024-22209

Description

Open edX Platform is a service-oriented platform for authoring and delivering online learning. A user with a JWT and more limited scopes could call endpoints exceeding their access. This vulnerability has been patched in commit 019888f.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Edx/Edx Platform
cpe:2.3:a:edx:edx-platform:*:*:*:*:*:*:*:*
Range: <2024-01-12
Open EdX Platform/Open edX Platformllm-create
Open.edx/Platformllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: < commit 019888f

Patches

Vulnerability mechanics

References

github.com/openedx/edx-platform/commit/019888f3d15beaebcb7782934f6c43b0c2b3735envdPatch
github.com/openedx/edx-platform/security/advisories/GHSA-qx8m-mqx3-j9fmnvdExploitThird Party Advisory
github.com/openedx/edx-platform/blob/0b3e4d73b6fb6f41ae87cf2b77bca12052ee1ac8/lms/djangoapps/courseware/block_render.pynvdProduct

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000