CVE-2015-5601

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.

Date published : 2019-07-29

https://open.edx.org/announcements/CVE-2015-5601