CVE-2018-20859

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-20859
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20859.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-20859
Published
2019-07-30T19:15:12.967Z
Modified
2026-04-10T04:07:42.668222Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.

References

Affected packages

Git / github.com/edx/edx-platform

Affected ranges

Type
GIT
Repo
https://github.com/edx/edx-platform
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
79af9c175f79165d5e1b14b84d739ac2bcef4171
Fixed
5b144559fbdba7ff673cc1c165aa2d343e07b6bd
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2018-07-18"
        }
    ]
}

Affected versions

1.*
1.0.0
2.*
2.0.3
nedbat/test/h.*
nedbat/test/h.1.1
open-release/ginkgo.*
open-release/ginkgo.1
open-release/ginkgo.1rc1
open-release/ginkgo.2
Other
release-2016-12-14
release-2016-12-20
release-2017-01-04
release-2017-01-05
release-2017-01-10
release-2017-01-12
release-2017-01-18
release-2017-01-19
release-2017-01-20
release-2017-01-23
release-2017-01-25
release-2017-01-24-11.*
release-2017-01-24-11.34
release-2017-01-24-13.*
release-2017-01-24-13.56
release-2017-01-24-14.*
release-2017-01-24-14.03
release-2017-01-24-14.42
release-2017-01-24-16.*
release-2017-01-24-16.28
release-2017-01-24-16.53
release-2017-01-26-11.*
release-2017-01-26-11.01
release-2017-01-27-10.*
release-2017-01-27-10.25
release-2017-01-30-11.*
release-2017-01-30-11.59
release-2017-01-31-10.*
release-2017-01-31-10.55
release-2017-02-02-10.*
release-2017-02-02-10.47
release-2017-02-03-10.*
release-2017-02-03-10.45
release-2017-02-06-10.*
release-2017-02-06-10.01
release-2017-02-07-10.*
release-2017-02-07-10.46
release-2017-02-08-12.*
release-2017-02-08-12.19
release-2017-02-10-11.*
release-2017-02-10-11.52
release-2017-02-15-12.*
release-2017-02-15-12.20
release-2017-02-15-13.*
release-2017-02-15-13.29
release-2017-02-16-10.*
release-2017-02-16-10.22
release-2017-02-16-12.*
release-2017-02-16-12.24
release-2017-02-24-11.*
release-2017-02-24-11.41
release-2017-02-27-10.*
release-2017-02-27-10.28
release-2017-02-28-10.*
release-2017-02-28-10.53
release-2017-03-02-10.*
release-2017-03-02-10.54
release-2017-03-03-10.*
release-2017-03-03-10.27
release-2017-03-06-10.*
release-2017-03-06-10.08
release-2017-03-08-10.*
release-2017-03-08-10.55
release-2017-03-09-14.*
release-2017-03-09-14.39
release-2017-03-09-14.55
release-2017-03-09-15.*
release-2017-03-09-15.41
release-2017-03-10-10.*
release-2017-03-10-10.52
release-2017-03-13-10.*
release-2017-03-13-10.55
release-2017-03-16-10.*
release-2017-03-16-10.15
release-2017-03-17-10.*
release-2017-03-17-10.23
release-2017-03-20-10.*
release-2017-03-20-10.15
release-2017-03-24-10.*
release-2017-03-24-10.31
release-2017-03-27-11.*
release-2017-03-27-11.36
release-2017-03-27-14.*
release-2017-03-27-14.50
release-2017-03-28-10.*
release-2017-03-28-10.35
release-2017-03-29-10.*
release-2017-03-29-10.46
release-2017-03-30-10.*
release-2017-03-30-10.19
release-2017-03-31-10.*
release-2017-03-31-10.31
release-2017-04-04-16.*
release-2017-04-04-16.57
release-2017-04-06-10.*
release-2017-04-06-10.13
release-2017-04-07-10.*
release-2017-04-07-10.37
release-2017-04-11-09.*
release-2017-04-11-09.47
release-2017-04-12-10.*
release-2017-04-12-10.02
release-2017-04-13-13.*
release-2017-04-13-13.13
release-2017-04-14-10.*
release-2017-04-14-10.45
release-2017-04-18-10.*
release-2017-04-18-10.48
release-2017-04-19-11.*
release-2017-04-19-11.07
release-2017-04-20-11.*
release-2017-04-20-11.19
release-2017-04-26-10.*
release-2017-04-26-10.55
release-2017-04-27-13.*
release-2017-04-27-13.54
release-2017-05-01-12.*
release-2017-05-01-12.06
release-2017-05-02-10.*
release-2017-05-02-10.39
release-2017-05-03-11.*
release-2017-05-03-11.26
release-2017-05-04-10.*
release-2017-05-04-10.04
release-2017-05-05-10.*
release-2017-05-05-10.55
release-2017-05-08-11.*
release-2017-05-08-11.05
release-2017-05-08-13.*
release-2017-05-08-13.55
release-2017-05-09-10.*
release-2017-05-09-10.12
release-2017-05-12-09.*
release-2017-05-12-09.54
release-2017-05-16-15.*
release-2017-05-16-15.56
release-2017-05-17-12.*
release-2017-05-17-12.16
release-2017-05-19-12.*
release-2017-05-19-12.18
release-2017-05-23-10.*
release-2017-05-23-10.10
release-2017-05-24-11.*
release-2017-05-24-11.05
release-2017-05-25-10.*
release-2017-05-25-10.12
release-2017-05-30-10.*
release-2017-05-30-10.20
release-2017-05-31-11.*
release-2017-05-31-11.18
release-2017-06-01-12.*
release-2017-06-01-12.14
release-2017-06-05-10.*
release-2017-06-05-10.46
release-2017-06-07-10.*
release-2017-06-07-10.37
release-2017-06-09-10.*
release-2017-06-09-10.25
release-2017-06-13-09.*
release-2017-06-13-09.54
release-2017-06-14-10.*
release-2017-06-14-10.56
release-2017-06-14-14.*
release-2017-06-14-14.18
release-2017-06-15-10.*
release-2017-06-15-10.10
release-2017-06-16-09.*
release-2017-06-16-09.46
release-2017-06-19-11.*
release-2017-06-19-11.39
release-2017-06-20-10.*
release-2017-06-20-10.33
release-2017-06-21-12.*
release-2017-06-21-12.22
release-2017-06-22-10.*
release-2017-06-22-10.40
release-2017-06-23-13.*
release-2017-06-23-13.54
release-2017-06-26-12.*
release-2017-06-26-12.11
release-2017-06-27-09.*
release-2017-06-27-09.53
release-2017-06-28-11.*
release-2017-06-28-11.31
release-2017-06-29-10.*
release-2017-06-29-10.31
release-2017-06-30-10.*
release-2017-06-30-10.42
release-2017-06-30-14.*
release-2017-06-30-14.04
release-2017-07-05-11.*
release-2017-07-05-11.40
release-2017-07-06-10.*
release-2017-07-06-10.17
release-2017-07-10-12.*
release-2017-07-10-12.54
release-2017-07-11-11.*
release-2017-07-11-11.04
release-2017-07-13-10.*
release-2017-07-13-10.42
release-2017-07-14-10.*
release-2017-07-14-10.08
release-2017-07-18-11.*
release-2017-07-18-11.53
release-2017-07-19-11.*
release-2017-07-19-11.31
release-2017-07-20-10.*
release-2017-07-20-10.39
release-2017-07-21-10.*
release-2017-07-21-10.41
release-2017-07-24-13.*
release-2017-07-24-13.06
release-2017-07-25-11.*
release-2017-07-25-11.43
release-2017-07-25-17.*
release-2017-07-25-17.42
release-2017-07-25-20.*
release-2017-07-25-20.52
release-2017-07-25-23.*
release-2017-07-25-23.50
release-2017-07-27-09.*
release-2017-07-27-09.38
release-2017-07-28-10.*
release-2017-07-28-10.29
release-2017-07-31-13.*
release-2017-07-31-13.01
release-2017-08-01-10.*
release-2017-08-01-10.30
release-2017-08-02-10.*
release-2017-08-02-10.16
release-2017-08-03-10.*
release-2017-08-03-10.38
release-2017-08-04-10.*
release-2017-08-04-10.35
release-2017-08-04-15.*
release-2017-08-04-15.49
release-2017-08-04-16.*
release-2017-08-04-16.31
release-2017-08-09-10.*
release-2017-08-09-10.42
release-2017-08-10-10.*
release-2017-08-10-10.53
release-2017-08-17-09.*
release-2017-08-17-09.24
release-2017-08-18-11.*
release-2017-08-18-11.40
release-2017-08-21-12.*
release-2017-08-21-12.06
release-2017-08-22-10.*
release-2017-08-22-10.51
release-2017-08-23-09.*
release-2017-08-23-09.56
release-2017-08-24-10.*
release-2017-08-24-10.43
release-2017-08-25-11.*
release-2017-08-25-11.49
release-2017-08-28-10.*
release-2017-08-28-10.33
release-2017-08-30-12.*
release-2017-08-30-12.26
release-2017-08-31-10.*
release-2017-08-31-10.47
release-2017-09-01-10.*
release-2017-09-01-10.14
release-2017-09-05-10.*
release-2017-09-05-10.27
release-2017-09-06-10.*
release-2017-09-06-10.35
release-2017-09-07-11.*
release-2017-09-07-11.12
release-2017-09-08-10.*
release-2017-09-08-10.11
release-2017-09-12-12.*
release-2017-09-12-12.47
release-2017-09-13-10.*
release-2017-09-13-10.05
release-2017-09-14-10.*
release-2017-09-14-10.50
release-2017-09-15-12.*
release-2017-09-15-12.25
release-2017-09-18-10.*
release-2017-09-18-10.32
release-2017-09-19-11.*
release-2017-09-19-11.39
release-2017-09-20-15.*
release-2017-09-20-15.01
release-2017-09-25-09.*
release-2017-09-25-09.58
release-2017-09-26-10.*
release-2017-09-26-10.41
release-2017-09-29-11.*
release-2017-09-29-11.10
release-2017-10-02-10.*
release-2017-10-02-10.39
release-2017-10-03-10.*
release-2017-10-03-10.00
release-2017-10-04-09.*
release-2017-10-04-09.49
release-2017-10-05-10.*
release-2017-10-05-10.18
release-2017-10-10-10.*
release-2017-10-10-10.22
release-2017-10-13-10.*
release-2017-10-13-10.00
release-2017-10-18-10.*
release-2017-10-18-10.19
release-2017-10-25-10.*
release-2017-10-25-10.48
release-2017-10-26-12.*
release-2017-10-26-12.22
release-2017-10-30-10.*
release-2017-10-30-10.55
release-2017-11-03-10.*
release-2017-11-03-10.36
release-2017-11-06-14.*
release-2017-11-06-14.18
release-2017-11-07-09.*
release-2017-11-07-09.52
release-2017-11-08-11.*
release-2017-11-08-11.22
release-2017-11-08-16.*
release-2017-11-08-16.31
release-2017-11-09-12.*
release-2017-11-09-12.30
release-2017-11-13-12.*
release-2017-11-13-12.24
release-2017-11-14-11.*
release-2017-11-14-11.31
release-2017-11-15-10.*
release-2017-11-15-10.40
release-2017-11-22-10.*
release-2017-11-22-10.56
release-2017-11-28-11.*
release-2017-11-28-11.13
release-2017-11-30-11.*
release-2017-11-30-11.26
release-2017-12-07-11.*
release-2017-12-07-11.54
release-2017-12-11-10.*
release-2017-12-11-10.23
release-2017-12-12-11.*
release-2017-12-12-11.26
release-2017-12-13-12.*
release-2017-12-13-12.24
release-2017-12-14-15.*
release-2017-12-14-15.40
release-2017-12-20-11.*
release-2017-12-20-11.58
release-2017-12-21-09.*
release-2017-12-21-09.39
release-2018-01-03-12.*
release-2018-01-03-12.34
release-2018-01-08-10.*
release-2018-01-08-10.05
release-2018-01-10-09.*
release-2018-01-10-09.56
release-2018-01-11-10.*
release-2018-01-11-10.00
release-2018-01-17-09.*
release-2018-01-17-09.55
release-2018-01-18-10.*
release-2018-01-18-10.46
release-2018-01-19-10.*
release-2018-01-19-10.16
release-2018-01-24-10.*
release-2018-01-24-10.51
release-2018-01-25-10.*
release-2018-01-25-10.41
release-2018-01-25-12.*
release-2018-01-25-12.45
release-2018-01-26-10.*
release-2018-01-26-10.26
release-2018-01-29-15.*
release-2018-01-29-15.48
release-2018-01-30-11.*
release-2018-01-30-11.00
release-2018-01-31-10.*
release-2018-01-31-10.07
release-2018-02-01-10.*
release-2018-02-01-10.35
release-2018-02-02-10.*
release-2018-02-02-10.16
release-2018-02-05-10.*
release-2018-02-05-10.55
release-2018-02-07-13.*
release-2018-02-07-13.00
release-2018-02-08-10.*
release-2018-02-08-10.43
release-2018-02-12-10.*
release-2018-02-12-10.34
release-2018-02-13-10.*
release-2018-02-13-10.20
release-2018-02-14-11.*
release-2018-02-14-11.33
release-2018-02-15-11.*
release-2018-02-15-11.12
release-2018-02-16-10.*
release-2018-02-16-10.17
release-2018-02-20-10.*
release-2018-02-20-10.18
release-2018-02-20-16.*
release-2018-02-20-16.39
release-2018-02-22-12.*
release-2018-02-22-12.25
release-2018-02-26-11.*
release-2018-02-26-11.08
release-2018-02-26-11.53
release-2018-02-27-09.*
release-2018-02-27-09.43
release-2018-02-28-10.*
release-2018-02-28-10.05
release-2018-03-01-10.*
release-2018-03-01-10.20
release-2018-03-02-13.*
release-2018-03-02-13.49
release-2018-03-06-10.*
release-2018-03-06-10.10
release-2018-03-07-10.*
release-2018-03-07-10.54
release-2018-03-08-10.*
release-2018-03-08-10.15
release-2018-03-09-10.*
release-2018-03-09-10.44
release-2018-03-14-11.*
release-2018-03-14-11.01
release-2018-03-15-11.*
release-2018-03-15-11.34
release-2018-03-16-12.*
release-2018-03-16-12.27
release-2018-03-20-11.*
release-2018-03-20-11.01
release-2018-03-21-12.*
release-2018-03-21-12.42
release-2018-03-26-09.*
release-2018-03-26-09.36
release-2018-03-27-13.*
release-2018-03-27-13.59
release-2018-03-28-12.*
release-2018-03-28-12.05
release-2018-04-02-11.*
release-2018-04-02-11.52
release-2018-04-03-11.*
release-2018-04-03-11.29
release-2018-04-04-10.*
release-2018-04-04-10.52
release-2018-04-04-12.*
release-2018-04-04-12.31
release-2018-04-05-11.*
release-2018-04-05-11.56
release-2018-04-06-11.*
release-2018-04-06-11.29
release-2018-04-09-13.*
release-2018-04-09-13.31
release-2018-04-10-10.*
release-2018-04-10-10.47
release-2018-04-11-10.*
release-2018-04-11-10.12
release-2018-04-12-10.*
release-2018-04-12-10.59
release-2018-04-13-12.*
release-2018-04-13-12.54
release-2018-04-18-11.*
release-2018-04-18-11.24
release-2018-04-19-11.*
release-2018-04-19-11.56
release-2018-04-23-09.*
release-2018-04-23-09.44
release-2018-04-24-12.*
release-2018-04-24-12.48
release-2018-04-27-10.*
release-2018-04-27-10.48
release-2018-05-01-10.*
release-2018-05-01-10.00
release-2018-05-02-12.*
release-2018-05-02-12.30
release-2018-05-03-12.*
release-2018-05-03-12.04
release-2018-05-04-10.*
release-2018-05-04-10.12
release-2018-05-08-10.*
release-2018-05-08-10.45
release-2018-05-09-13.*
release-2018-05-09-13.01
release-2018-05-10-11.*
release-2018-05-10-11.47
release-2018-05-11-15.*
release-2018-05-11-15.15
release-2018-05-15-13.*
release-2018-05-15-13.13
release-2018-05-16-10.*
release-2018-05-16-10.51
release-2018-05-16-13.*
release-2018-05-16-13.40
release-2018-05-16-15.*
release-2018-05-16-15.08
release-2018-05-17-09.*
release-2018-05-17-09.48
release-2018-05-21-15.*
release-2018-05-21-15.15
release-2018-05-22-13.*
release-2018-05-22-13.11
release-2018-05-23-12.*
release-2018-05-23-12.18
release-2018-05-24-12.*
release-2018-05-24-12.24
release-2018-05-25-10.*
release-2018-05-25-10.50
release-2018-05-29-10.*
release-2018-05-29-10.03
release-2018-05-30-10.*
release-2018-05-30-10.21
release-2018-05-31-10.*
release-2018-05-31-10.42
release-2018-06-01-10.*
release-2018-06-01-10.30
release-2018-06-05-10.*
release-2018-06-05-10.35
release-2018-06-06-15.*
release-2018-06-06-15.36
release-2018-06-08-10.*
release-2018-06-08-10.40
release-2018-06-08-12.*
release-2018-06-08-12.03
release-2018-06-11-11.*
release-2018-06-11-11.53
release-2018-06-12-11.*
release-2018-06-12-11.15
release-2018-06-12-15.*
release-2018-06-12-15.32
release-2018-06-14-11.*
release-2018-06-14-11.21
release-2018-06-15-10.*
release-2018-06-15-10.19
release-2018-06-19-13.*
release-2018-06-19-13.38
release-2018-06-20-10.*
release-2018-06-20-10.01
release-2018-06-21-10.*
release-2018-06-21-10.54
release-2018-06-22-09.*
release-2018-06-22-09.58
release-2018-06-25-11.*
release-2018-06-25-11.19
release-2018-06-26-11.*
release-2018-06-26-11.01
release-2018-06-27-13.*
release-2018-06-27-13.13
release-2018-06-28-11.*
release-2018-06-28-11.10
release-2018-07-02-11.*
release-2018-07-02-11.38
release-2018-07-03-11.*
release-2018-07-03-11.03
release-2018-07-05-15.*
release-2018-07-05-15.57
release-2018-07-06-11.*
release-2018-07-06-11.00
release-2018-07-10-10.*
release-2018-07-10-10.10
release-2018-07-12-15.*
release-2018-07-12-15.00
release-2018-07-13-10.*
release-2018-07-13-10.29
release-2018-07-17-10.*
release-2018-07-17-10.01

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20859.json"