edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address.
Source: NIST
CVE-2016-10765
Security in mind
edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address.
Source: NIST
CVE-2016-10765