Medium
Security advisory
edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-20859
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 09:49 UTC · Revision 1
Source evidence
edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.
osv:CVE-2018-20859
Complete source record
{
"id": "f9499b97b3678eaa1e5c1fcd69ba110d2000fa051151f55bc2be9f9d81b5b7ab",
"url": "https://osv.dev/vulnerability/CVE-2018-20859",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-20859",
"summary": "edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.",
"evidence": "osv:CVE-2018-20859",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2018-20859",
"aliases": [
"CVE-2018-20859"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/edx/edx-platform",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "79af9c175f79165d5e1b14b84d739ac2bcef4171"
},
{
"fixed": "5b144559fbdba7ff673cc1c165aa2d343e07b6bd"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:edx:edx-platform:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2018-07-18"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "5b144559fbdba7ff673cc1c165aa2d343e07b6bd"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"release-2018-07-05-15.57",
"release-2018-07-17-10.01",
"release-2018-07-13-10.29",
"release-2018-07-12-15.00",
"release-2018-07-03-11.03",
"release-2018-07-10-10.10",
"release-2018-07-06-11.00",
"release-2018-07-02-11.38",
"nedbat/test/h.1.1",
"release-2018-06-28-11.10",
"release-2018-06-27-13.13",
"release-2018-06-26-11.01",
"release-2018-06-25-11.19",
"release-2018-06-21-10.54",
"release-2018-06-19-13.38",
"release-2018-06-22-09.58",
"release-2018-06-20-10.01",
"release-2018-06-12-11.15",
"release-2018-06-15-10.19",
"release-2018-06-14-11.21",
"release-2018-06-12-15.32",
"release-2018-06-11-11.53",
"release-2018-06-08-12.03",
"release-2018-06-08-10.40",
"release-2018-06-05-10.35",
"release-2018-06-06-15.36",
"release-2018-06-01-10.30",
"release-2018-05-23-12.18",
"release-2018-05-31-10.42",
"release-2018-05-29-10.03",
"release-2018-04-27-10.48",
"release-2018-05-30-10.21",
"release-2018-05-25-10.50",
"release-2018-05-24-12.24",
"release-2018-05-22-13.11",
"release-2018-05-21-15.15",
"release-2018-05-17-09.48",
"release-2018-05-16-15.08",
"release-2018-05-11-15.15",
"release-2018-05-16-13.40",
"release-2018-05-15-13.13",
"release-2018-05-16-10.51",
"release-2018-05-10-11.47",
"release-2018-05-09-13.01",
"release-2018-05-08-10.45",
"release-2018-05-02-12.30",
"release-2018-05-04-10.12",
"release-2018-05-03-12.04",
"release-2018-04-23-09.44",
"release-2018-05-01-10.00",
"release-2018-04-24-12.48",
"release-2018-04-19-11.56",
"release-2018-04-18-11.24",
"release-2018-04-13-12.54",
"release-2018-04-12-10.59",
"release-2018-04-11-10.12",
"release-2018-04-10-10.47",
"release-2018-04-09-13.31",
"release-2018-04-04-12.31",
"release-2018-04-04-10.52",
"release-2018-04-06-11.29",
"release-2018-04-05-11.56",
"release-2018-04-03-11.29",
"release-2018-04-02-11.52",
"release-2018-03-28-12.05",
"release-2018-03-27-13.59",
"release-2018-03-26-09.36",
"release-2018-03-21-12.42",
"release-2018-03-20-11.01",
"release-2018-03-15-11.34",
"release-2018-03-16-12.27",
"release-2018-02-26-11.53",
"release-2018-02-26-11.08",
"release-2018-03-14-11.01",
"release-2018-03-06-10.10",
"release-2018-03-09-10.44",
"release-2018-03-07-10.54",
"release-2018-03-08-10.15",
"release-2018-02-28-10.05",
"release-2018-03-02-13.49",
"release-2018-03-01-10.20",
"release-2018-02-27-09.43",
"release-2018-02-22-12.25",
"release-2018-02-20-16.39",
"release-2018-02-20-10.18",
"release-2018-02-16-10.17",
"release-2018-02-15-11.12",
"release-2018-02-14-11.33",
"release-2018-02-13-10.20",
"release-2018-02-12-10.34",
"release-2018-02-08-10.43",
"release-2018-02-07-13.00",
"release-2018-02-02-10.16",
"release-2018-02-05-10.55",
"release-2018-02-01-10.35",
"release-2018-01-31-10.07",
"release-2018-01-30-11.00",
"release-2018-01-24-10.51",
"release-2018-01-29-15.48",
"release-2018-01-26-10.26",
"open-release/ginkgo.2",
"release-2018-01-25-12.45",
"release-2018-01-25-10.41",
"release-2018-01-17-09.55",
"release-2018-01-19-10.16",
"release-2018-01-18-10.46",
"release-2018-01-11-10.00",
"release-2018-01-10-09.56",
"release-2018-01-08-10.05",
"release-2018-01-03-12.34",
"release-2017-12-21-09.39",
"release-2017-12-11-10.23",
"release-2017-12-20-11.58",
"release-2017-12-12-11.26",
"release-2017-12-07-11.54",
"release-2017-12-14-15.40",
"release-2017-12-13-12.24",
"release-2017-11-30-11.26",
"release-2017-11-28-11.13",
"release-2017-11-22-10.56",
"release-2017-11-15-10.40",
"release-2017-11-14-11.31",
"release-2017-11-13-12.24",
"release-2017-11-09-12.30",
"release-2017-11-08-16.31",
"release-2017-11-08-11.22",
"release-2017-11-07-09.52",
"release-2017-11-06-14.18",
"release-2017-11-03-10.36",
"release-2017-10-30-10.55",
"release-2017-10-25-10.48",
"release-2017-10-26-12.22",
"release-2017-10-18-10.19",
"release-2017-10-13-10.00",
"release-2017-10-10-10.22",
"release-2017-10-05-10.18",
"release-2017-10-04-09.49",
"release-2017-10-03-10.00",
"release-2017-10-02-10.39",
"release-2017-09-29-11.10",
"release-2017-09-26-10.41",
"release-2017-09-25-09.58",
"release-2017-09-19-11.39",
"release-2017-09-20-15.01",
"release-2017-09-18-10.32",
"release-2017-09-12-12.47",
"release-2017-09-15-12.25",
"release-2017-09-14-10.50",
"release-2017-09-13-10.05",
"release-2017-09-08-10.11",
"release-2017-09-07-11.12",
"release-2017-09-06-10.35",
"release-2017-09-05-10.27",
"release-2017-08-31-10.47",
"release-2017-09-01-10.14",
"release-2017-08-30-12.26",
"release-2017-08-23-09.56",
"release-2017-08-28-10.33",
"release-2017-08-25-11.49",
"release-2017-08-24-10.43",
"2.0.3",
"release-2017-08-22-10.51",
"release-2017-08-21-12.06",
"open-release/ginkgo.1",
"release-2017-08-18-11.40",
"release-2017-08-17-09.24",
"1.0.0",
"release-2017-08-10-10.53",
"release-2017-08-09-10.42",
"release-2017-08-04-16.31",
"release-2017-08-04-15.49",
"release-2017-08-04-10.35",
"release-2017-08-03-10.38",
"release-2017-08-02-10.16",
"release-2017-07-31-13.01",
"release-2017-08-01-10.30",
"open-release/ginkgo.1rc1",
"release-2017-07-28-10.29",
"release-2017-07-27-09.38",
"release-2017-07-25-23.50",
"release-2017-07-25-20.52",
"release-2017-07-25-17.42",
"release-2017-07-25-11.43",
"release-2017-07-24-13.06",
"release-2017-07-21-10.41",
"release-2017-07-20-10.39",
"release-2017-06-16-09.46",
"release-2017-07-19-11.31",
"release-2017-07-18-11.53",
"release-2017-07-14-10.08",
"release-2017-07-13-10.42",
"release-2017-07-11-11.04",
"release-2017-07-10-12.54",
"release-2017-07-06-10.17",
"release-2017-06-30-14.04",
"release-2017-06-30-10.42",
"release-2017-07-05-11.40",
"release-2017-06-29-10.31",
"release-2017-06-28-11.31",
"release-2017-06-27-09.53",
"release-2017-06-26-12.11",
"release-2017-06-23-13.54",
"release-2017-06-22-10.40",
"release-2017-06-21-12.22",
"release-2017-06-20-10.33",
"release-2017-06-19-11.39",
"release-2017-06-15-10.10",
"release-2017-06-14-14.18",
"release-2017-06-14-10.56",
"release-2017-06-13-09.54",
"release-2017-06-09-10.25",
"release-2017-06-07-10.37",
"release-2017-06-05-10.46",
"release-2017-06-01-12.14",
"release-2017-05-31-11.18",
"release-2017-05-30-10.20",
"release-2017-05-25-10.12",
"release-2017-05-24-11.05",
"release-2017-05-23-10.10",
"release-2017-05-19-12.18",
"release-2017-05-17-12.16",
"release-2017-05-16-15.56",
"release-2017-05-12-09.54",
"release-2017-05-09-10.12",
"release-2017-05-08-11.05",
"release-2017-05-08-13.55",
"release-2017-05-05-10.55",
"release-2017-05-03-11.26",
"release-2017-05-04-10.04",
"release-2017-05-02-10.39",
"release-2017-05-01-12.06",
"release-2017-04-27-13.54",
"release-2017-04-26-10.55",
"release-2017-04-20-11.19",
"release-2017-04-19-11.07",
"release-2017-04-18-10.48",
"release-2017-04-14-10.45",
"release-2017-04-13-13.13",
"release-2017-04-12-10.02",
"release-2017-04-11-09.47",
"release-2017-04-06-10.13",
"release-2017-04-07-10.37",
"release-2017-04-04-16.57",
"release-2017-03-31-10.31",
"release-2017-03-30-10.19",
"release-2017-03-29-10.46",
"release-2017-03-28-10.35",
"release-2017-03-27-14.50",
"release-2017-03-27-11.36",
"release-2017-03-24-10.31",
"release-2017-03-20-10.15",
"release-2017-03-17-10.23",
"release-2017-03-16-10.15",
"release-2017-03-13-10.55",
"release-2017-03-10-10.52",
"release-2017-03-09-15.41",
"release-2017-03-09-14.55",
"release-2017-03-09-14.39",
"release-2017-03-08-10.55",
"release-2017-03-06-10.08",
"release-2017-03-03-10.27",
"release-2017-03-02-10.54",
"release-2017-02-28-10.53",
"release-2017-02-27-10.28",
"release-2017-02-24-11.41",
"release-2017-02-15-13.29",
"release-2017-02-15-12.20",
"release-2017-02-16-12.24",
"release-2017-02-16-10.22",
"release-2017-01-31-10.55",
"release-2017-02-10-11.52",
"release-2017-02-07-10.46",
"release-2017-02-08-12.19",
"release-2017-01-25",
"release-2017-02-06-10.01",
"release-2017-02-02-10.47",
"release-2017-02-03-10.45",
"release-2017-01-30-11.59",
"release-2017-01-27-10.25",
"release-2017-01-26-11.01",
"release-2017-01-12",
"release-2017-01-24-16.53",
"release-2017-01-24-16.28",
"release-2017-01-24-14.42",
"release-2017-01-24-14.03",
"release-2017-01-24-13.56",
"release-2017-01-24-11.34",
"release-2017-01-23",
"release-2017-01-19",
"release-2017-01-20",
"release-2017-01-18",
"release-2017-01-10",
"release-2017-01-05",
"release-2017-01-04",
"release-2016-12-20",
"release-2016-12-14"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20859.json"
}
}
],
"modified": "2026-10-20T10:48:03.752651334Z",
"provider": "osv",
"references": [
"https://groups.google.com/forum/#%21topic/openedx-announce/wsm5mtUhhME",
"https://github.com/edx/edx-platform/commit/5b144559fbdba7ff673cc1c165aa2d343e07b6bd.patch",
"https://patch-diff.githubusercontent.com/raw/edx/edx-platform/pull/18639.patch"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2018-20859",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 379991,
"published_at": "2019-07-30T19:15:12.967+00:00"
}