cve.bz

CVE-2020-13144

8.8 highEPSS 11%

High (8.8) in edx open edx platform. EPSS 11% chance of exploitation in the next 30 days.

Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>New subsection>New unit>Add new component>Problem button>Advanced tab>Custom Python evaluated code" screen, edit the problem, and execute Python code. This leads to arbitrary code execution.

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWEs
CWE-94, CWE-862
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON