CVE-2024-22209

Name of the Vulnerable Software and Affected Versions Open edX Platform versions prior to the version containing commit 019888f

Description The issue affects the Open edX Platform, a service-oriented platform for authoring and delivering online learning. A user with a JWT and limited scopes could call API Endpoints exceeding their access.

Recommendations For versions prior to the version containing commit 019888f, update to a version that includes the patch commit 019888f to resolve the issue. As a temporary workaround, consider restricting access to sensitive API Endpoints to minimize the risk of exploitation.