Open edX Platform vulnerabilities

A vulnerability in the Open edX platform allows authenticated Enterprise Admin users to supply any URL via the metadata_url POST parameter. This URL is passed directly without validation, enabling an attacker to force the server to make HTTP requests to internal network services or malicious endpoints.

The Open edX Platform before commit 76462f1e5fa9b37d2621ad7ad19514b403908970 contains an open redirect vulnerability in the view_survey endpoint. The redirect_url parameter is not validated, allowing attackers to redirect authenticated users to malicious sites and perform phishing and credential theft.

In Open edX Platform from the maple release to ulmo, an unauthenticated attacker can fully bypass the email verification process. This exploits OAuth2 tokens issued to inactive users and the exposure of activation_key in the REST API response.