CVE-2026-55421mediumCWE-918

CVE-2026-55421: fallo de gravedad media en openedx-platform

Open edX Platform: SSRF in Studio Video Download Endpoint

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear openedx-platform

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.8epss 0.5%
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-supplied files[].url, performs a server-side fetch using "requests.get(url, allow_redirects=True)". The fetched bytes are then returned inside a ZIP response. This enables SSRF with response exfiltration. Redirect-following is enabled, and there is no timeout in the vulnerable fetch path. This issue has been patched via commit 00b7c3c.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Productos afectados
openedx · openedx-platform
CVEs relacionadas — openedx-platform

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-85272MEDIUMOpen edX Platform: Path traversal via prefix-bypass in safe_extractall Path ValidationEPSS 0.5%CVE-2026-53635HIGHOpen edX Platform: Insufficient Permission on set_course_mode_price()EPSS 0.4%CVE-2026-42858HIGHOpen edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync EndpointEPSS 0.4%CVE-2026-85271MEDIUMOpen edX Platform: Stored CSS Injection in Email Digest Notifications via Unsanitized Thread Title (incomplete patch of CVE-2026-42857)EPSS 0.4%CVE-2026-53636MEDIUMOpen edX LTI OAuth Replay AttackEPSS 0.3%CVE-2026-97702MEDIUMOpen edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforceEPSS 0.2%