CVE-2026-53635highCWE-862

CVE-2026-53635: fallo de gravedad alta en openedx-platform

Open edX Platform: Insufficient Permission on set_course_mode_price()

Publicada el

Seguir esta CVE+ Monitorear openedx-platform

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.6epss 0.4%
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function set_course_mode_price() at lms/djangoapps/instructor/views/instructor_dashboard.py:430 is decorated only with @login_required and performs no course-level permission check. Any authenticated user — including a learner account with zero course roles — can issue a single POST request to overwrite the honor mode price and currency of any course on the platform. The companion frontend modal was removed in a prior cleanup, but the URL route and view remain live, making this an unguarded orphan endpoint. This issue has been patched via commit 59bb6d6.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Productos afectados
openedx · openedx-platform
CVEs relacionadas — openedx-platform

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-85272MEDIUMOpen edX Platform: Path traversal via prefix-bypass in safe_extractall Path ValidationEPSS 0.5%CVE-2026-55421MEDIUMOpen edX Platform: SSRF in Studio Video Download EndpointEPSS 0.5%CVE-2026-42858HIGHOpen edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync EndpointEPSS 0.4%CVE-2026-85271MEDIUMOpen edX Platform: Stored CSS Injection in Email Digest Notifications via Unsanitized Thread Title (incomplete patch of CVE-2026-42857)EPSS 0.4%CVE-2026-53636MEDIUMOpen edX LTI OAuth Replay AttackEPSS 0.3%CVE-2026-97702MEDIUMOpen edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforceEPSS 0.2%