Security Advisory
CVE-2015-5601
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files.