{"id":"CVE-2018-20859","details":"edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.","modified":"2026-04-10T04:07:42.668222Z","published":"2019-07-30T19:15:12.967Z","references":[{"type":"WEB","url":"https://groups.google.com/forum/#%21topic/openedx-announce/wsm5mtUhhME"},{"type":"FIX","url":"https://github.com/edx/edx-platform/commit/5b144559fbdba7ff673cc1c165aa2d343e07b6bd.patch"},{"type":"FIX","url":"https://patch-diff.githubusercontent.com/raw/edx/edx-platform/pull/18639.patch"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/edx/edx-platform","events":[{"introduced":"0"},{"fixed":"79af9c175f79165d5e1b14b84d739ac2bcef4171"},{"fixed":"5b144559fbdba7ff673cc1c165aa2d343e07b6bd"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"2018-07-18"}]}}],"versions":["1.0.0","2.0.3","nedbat/test/h.1.1","open-release/ginkgo.1","open-release/ginkgo.1rc1","open-release/ginkgo.2","release-2016-12-14","release-2016-12-20","release-2017-01-04","release-2017-01-05","release-2017-01-10","release-2017-01-12","release-2017-01-18","release-2017-01-19","release-2017-01-20","release-2017-01-23","release-2017-01-24-11.34","release-2017-01-24-13.56","release-2017-01-24-14.03","release-2017-01-24-14.42","release-2017-01-24-16.28","release-2017-01-24-16.53","release-2017-01-25","release-2017-01-26-11.01","release-2017-01-27-10.25","release-2017-01-30-11.59","release-2017-01-31-10.55","release-2017-02-02-10.47","release-2017-02-03-10.45","release-2017-02-06-10.01","release-2017-02-07-10.46","release-2017-02-08-12.19","release-2017-02-10-11.52","release-2017-02-15-12.20","release-2017-02-15-13.29","release-2017-02-16-10.22","release-2017-02-16-12.24","release-2017-02-24-11.41","release-2017-02-27-10.28","release-2017-02-28-10.53","release-2017-03-02-10.54","release-2017-03-03-10.27","release-2017-03-06-10.08","release-2017-03-08-10.55","release-2017-03-09-14.39","release-2017-03-09-14.55","release-2017-03-09-15.41","release-2017-03-10-10.52","release-2017-03-13-10.55","release-2017-03-16-10.15","release-2017-03-17-10.23","release-2017-03-20-10.15","release-2017-03-24-10.31","release-2017-03-27-11.36","release-2017-03-27-14.50","release-2017-03-28-10.35","release-2017-03-29-10.46","release-2017-03-30-10.19","release-2017-03-31-10.31","release-2017-04-04-16.57","release-2017-04-06-10.13","release-2017-04-07-10.37","release-2017-04-11-09.47","release-2017-04-12-10.02","release-2017-04-13-13.13","release-2017-04-14-10.45","release-2017-04-18-10.48","release-2017-04-19-11.07","release-2017-04-20-11.19","release-2017-04-26-10.55","release-2017-04-27-13.54","release-2017-05-01-12.06","release-2017-05-02-10.39","release-2017-05-03-11.26","release-2017-05-04-10.04","release-2017-05-05-10.55","release-2017-05-08-11.05","release-2017-05-08-13.55","release-2017-05-09-10.12","release-2017-05-12-09.54","release-2017-05-16-15.56","release-2017-05-17-12.16","release-2017-05-19-12.18","release-2017-05-23-10.10","release-2017-05-24-11.05","release-2017-05-25-10.12","release-2017-05-30-10.20","release-2017-05-31-11.18","release-2017-06-01-12.14","release-2017-06-05-10.46","release-2017-06-07-10.37","release-2017-06-09-10.25","release-2017-06-13-09.54","release-2017-06-14-10.56","release-2017-06-14-14.18","release-2017-06-15-10.10","release-2017-06-16-09.46","release-2017-06-19-11.39","release-2017-06-20-10.33","release-2017-06-21-12.22","release-2017-06-22-10.40","release-2017-06-23-13.54","release-2017-06-26-12.11","release-2017-06-27-09.53","release-2017-06-28-11.31","release-2017-06-29-10.31","release-2017-06-30-10.42","release-2017-06-30-14.04","release-2017-07-05-11.40","release-2017-07-06-10.17","release-2017-07-10-12.54","release-2017-07-11-11.04","release-2017-07-13-10.42","release-2017-07-14-10.08","release-2017-07-18-11.53","release-2017-07-19-11.31","release-2017-07-20-10.39","release-2017-07-21-10.41","release-2017-07-24-13.06","release-2017-07-25-11.43","release-2017-07-25-17.42","release-2017-07-25-20.52","release-2017-07-25-23.50","release-2017-07-27-09.38","release-2017-07-28-10.29","release-2017-07-31-13.01","release-2017-08-01-10.30","release-2017-08-02-10.16","release-2017-08-03-10.38","release-2017-08-04-10.35","release-2017-08-04-15.49","release-2017-08-04-16.31","release-2017-08-09-10.42","release-2017-08-10-10.53","release-2017-08-17-09.24","release-2017-08-18-11.40","release-2017-08-21-12.06","release-2017-08-22-10.51","release-2017-08-23-09.56","release-2017-08-24-10.43","release-2017-08-25-11.49","release-2017-08-28-10.33","release-2017-08-30-12.26","release-2017-08-31-10.47","release-2017-09-01-10.14","release-2017-09-05-10.27","release-2017-09-06-10.35","release-2017-09-07-11.12","release-2017-09-08-10.11","release-2017-09-12-12.47","release-2017-09-13-10.05","release-2017-09-14-10.50","release-2017-09-15-12.25","release-2017-09-18-10.32","release-2017-09-19-11.39","release-2017-09-20-15.01","release-2017-09-25-09.58","release-2017-09-26-10.41","release-2017-09-29-11.10","release-2017-10-02-10.39","release-2017-10-03-10.00","release-2017-10-04-09.49","release-2017-10-05-10.18","release-2017-10-10-10.22","release-2017-10-13-10.00","release-2017-10-18-10.19","release-2017-10-25-10.48","release-2017-10-26-12.22","release-2017-10-30-10.55","release-2017-11-03-10.36","release-2017-11-06-14.18","release-2017-11-07-09.52","release-2017-11-08-11.22","release-2017-11-08-16.31","release-2017-11-09-12.30","release-2017-11-13-12.24","release-2017-11-14-11.31","release-2017-11-15-10.40","release-2017-11-22-10.56","release-2017-11-28-11.13","release-2017-11-30-11.26","release-2017-12-07-11.54","release-2017-12-11-10.23","release-2017-12-12-11.26","release-2017-12-13-12.24","release-2017-12-14-15.40","release-2017-12-20-11.58","release-2017-12-21-09.39","release-2018-01-03-12.34","release-2018-01-08-10.05","release-2018-01-10-09.56","release-2018-01-11-10.00","release-2018-01-17-09.55","release-2018-01-18-10.46","release-2018-01-19-10.16","release-2018-01-24-10.51","release-2018-01-25-10.41","release-2018-01-25-12.45","release-2018-01-26-10.26","release-2018-01-29-15.48","release-2018-01-30-11.00","release-2018-01-31-10.07","release-2018-02-01-10.35","release-2018-02-02-10.16","release-2018-02-05-10.55","release-2018-02-07-13.00","release-2018-02-08-10.43","release-2018-02-12-10.34","release-2018-02-13-10.20","release-2018-02-14-11.33","release-2018-02-15-11.12","release-2018-02-16-10.17","release-2018-02-20-10.18","release-2018-02-20-16.39","release-2018-02-22-12.25","release-2018-02-26-11.08","release-2018-02-26-11.53","release-2018-02-27-09.43","release-2018-02-28-10.05","release-2018-03-01-10.20","release-2018-03-02-13.49","release-2018-03-06-10.10","release-2018-03-07-10.54","release-2018-03-08-10.15","release-2018-03-09-10.44","release-2018-03-14-11.01","release-2018-03-15-11.34","release-2018-03-16-12.27","release-2018-03-20-11.01","release-2018-03-21-12.42","release-2018-03-26-09.36","release-2018-03-27-13.59","release-2018-03-28-12.05","release-2018-04-02-11.52","release-2018-04-03-11.29","release-2018-04-04-10.52","release-2018-04-04-12.31","release-2018-04-05-11.56","release-2018-04-06-11.29","release-2018-04-09-13.31","release-2018-04-10-10.47","release-2018-04-11-10.12","release-2018-04-12-10.59","release-2018-04-13-12.54","release-2018-04-18-11.24","release-2018-04-19-11.56","release-2018-04-23-09.44","release-2018-04-24-12.48","release-2018-04-27-10.48","release-2018-05-01-10.00","release-2018-05-02-12.30","release-2018-05-03-12.04","release-2018-05-04-10.12","release-2018-05-08-10.45","release-2018-05-09-13.01","release-2018-05-10-11.47","release-2018-05-11-15.15","release-2018-05-15-13.13","release-2018-05-16-10.51","release-2018-05-16-13.40","release-2018-05-16-15.08","release-2018-05-17-09.48","release-2018-05-21-15.15","release-2018-05-22-13.11","release-2018-05-23-12.18","release-2018-05-24-12.24","release-2018-05-25-10.50","release-2018-05-29-10.03","release-2018-05-30-10.21","release-2018-05-31-10.42","release-2018-06-01-10.30","release-2018-06-05-10.35","release-2018-06-06-15.36","release-2018-06-08-10.40","release-2018-06-08-12.03","release-2018-06-11-11.53","release-2018-06-12-11.15","release-2018-06-12-15.32","release-2018-06-14-11.21","release-2018-06-15-10.19","release-2018-06-19-13.38","release-2018-06-20-10.01","release-2018-06-21-10.54","release-2018-06-22-09.58","release-2018-06-25-11.19","release-2018-06-26-11.01","release-2018-06-27-13.13","release-2018-06-28-11.10","release-2018-07-02-11.38","release-2018-07-03-11.03","release-2018-07-05-15.57","release-2018-07-06-11.00","release-2018-07-10-10.10","release-2018-07-12-15.00","release-2018-07-13-10.29","release-2018-07-17-10.01"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20859.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}