Vulnerabilities > CVE-2022-46147 - Unspecified vulnerability in Openedx Xblock-Drag-And-Drop-V2

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

openedx

NVD

Published: 2022-11-28

Updated: 2024-11-21

Summary

Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contains a patch for this issue. There are no known workarounds.

Vulnerable Configurations

Part	Description	Count
Application	Openedx Openedx Xblock Drag AND Drop V2 - Openedx Xblock Drag AND Drop V2 2.0.0 Openedx Xblock Drag AND Drop V2 2.0.1 Openedx Xblock Drag AND Drop V2 2.0.2 Openedx Xblock Drag AND Drop V2 2.0.3 Openedx Xblock Drag AND Drop V2 2.0.4 Openedx Xblock Drag AND Drop V2 2.0.5 Openedx Xblock Drag AND Drop V2 2.0.6 Openedx Xblock Drag AND Drop V2 2.0.7 Openedx Xblock Drag AND Drop V2 2.0.8 Openedx Xblock Drag AND Drop V2 2.0.9 Openedx Xblock Drag AND Drop V2 2.0.10 Openedx Xblock Drag AND Drop V2 2.0.11 Openedx Xblock Drag AND Drop V2 2.0.12 Openedx Xblock Drag AND Drop V2 2.0.14 Openedx Xblock Drag AND Drop V2 2.0.15 Openedx Xblock Drag AND Drop V2 2.0.16 Openedx Xblock Drag AND Drop V2 2.0.17 Openedx Xblock Drag AND Drop V2 2.0.18 Openedx Xblock Drag AND Drop V2 2.1.0 Openedx Xblock Drag AND Drop V2 2.1.1 Openedx Xblock Drag AND Drop V2 2.1.2 Openedx Xblock Drag AND Drop V2 2.1.3 Openedx Xblock Drag AND Drop V2 2.1.4 Openedx Xblock Drag AND Drop V2 2.1.5 Openedx Xblock Drag AND Drop V2 2.1.6 Openedx Xblock Drag AND Drop V2 2.1.7 Openedx Xblock Drag AND Drop V2 2.1.8 Openedx Xblock Drag AND Drop V2 2.2.0 Openedx Xblock Drag AND Drop V2 2.2.1 Openedx Xblock Drag AND Drop V2 2.2.3 Openedx Xblock Drag AND Drop V2 2.2.4 Openedx Xblock Drag AND Drop V2 2.2.5 Openedx Xblock Drag AND Drop V2 2.2.6 Openedx Xblock Drag AND Drop V2 2.2.8 Openedx Xblock Drag AND Drop V2 2.2.9 Openedx Xblock Drag AND Drop V2 2.2.10 Openedx Xblock Drag AND Drop V2 2.3.0 Openedx Xblock Drag AND Drop V2 2.3.1 Openedx Xblock Drag AND Drop V2 2.3.2 Openedx Xblock Drag AND Drop V2 2.3.3 Openedx Xblock Drag AND Drop V2 2.3.4 Openedx Xblock Drag AND Drop V2 2.3.5 Openedx Xblock Drag AND Drop V2 2.3.6 Openedx Xblock Drag AND Drop V2 2.3.8 Openedx Xblock Drag AND Drop V2 2.3.9 Openedx Xblock Drag AND Drop V2 2.3.10 Openedx Xblock Drag AND Drop V2 2.3.11 Openedx Xblock Drag AND Drop V2 2.4.0 Openedx Xblock Drag AND Drop V2 2.4.1 Openedx Xblock Drag AND Drop V2 2.4.2 Openedx Xblock Drag AND Drop V2 2.5.0 Openedx Xblock Drag AND Drop V2 2.6.0 Openedx Xblock Drag AND Drop V2 2.7.0	54

Summary

Vulnerable Configurations

References