CVE-2017-18381: Edx Edx-Platform

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials.

Affected products

• Edx Edx-Platform: before 2017-01-10 (fixed in 2017-01-10)

Published 2019-07-30. Last modified 2026-06-17.