CVE-2024-43782
CVSS V2 None
CVSS V3 None
Description
This openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Transifex. Before moving to pulling translations from the openedx-translations repository via openedx-atlas, translations in the edx-platform repository were validated using edx-i18n-tools. This validation included protection against malformed translations and translations-based script injections. Prior to this patch, the validation implemented in the openedx-translations repository did not include the same protections. The maintainer inspected the translations in the edx-platform directory of both the main and open-release/redwood.master branches of the openedx-translations repository and found no evidence of exploited translation strings.
Overview
- CVE ID
- CVE-2024-43782
- Assigner
- GitHub_M
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-08-23T14:35:08.787Z
- Last Modified Date
- 2024-08-23T14:35:08.787Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/openedx/openedx-translations/security/advisories/GHSA-fg8c-2pvj-wx3j | x_refsource_CONFIRM |
| https://github.com/openedx/openedx-translations/commit/3c4093705dec99590577c4d8270ce263f7fffc5a | x_refsource_MISC |
| https://github.com/openedx/openedx-translations/commit/b2444340e8702c7955310331c1db5fd85b25b92b | x_refsource_MISC |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-43782 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43782 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-08-24 13:12:25 | Added to TrackCVE |