Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
openedx-translations's Atlas translations for Open edX missing validation
Vulnerability Description
This openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Transifex. Before moving to pulling translations from the openedx-translations repository via openedx-atlas, translations in the edx-platform repository were validated using edx-i18n-tools. This validation included protection against malformed translations and translations-based script injections. Prior to this patch, the validation implemented in the openedx-translations repository did not include the same protections. The maintainer inspected the translations in the edx-platform directory of both the main and open-release/redwood.master branches of the openedx-translations repository and found no evidence of exploited translation strings.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Vulnerability Title
Open edX openedx-translations 安全漏洞
Vulnerability Description
openedx-translations是Open edX开源的一个库。 Open edX openedx-translations存在安全漏洞，该漏洞源于在迁移到通过openedx-atlas从openedx-translations仓库拉取翻译文件之前，openedx-translations仓库中的验证机制没有包含与edx-i18n-tools相同的保护措施以防止畸形翻译和基于翻译的脚本注入。
CVSS Information
N/A
Vulnerability Type
N/A