Originally published at: Security Alert: Cross Domain Referer Leakage via Social Follow Us Links - Open edX
Security Alert Severity: High Category: Cross Domain Referer Leakage Affected Projects: edx-platform Reporter: Smit B. Shah & Nikhil Srivastava from Techdefence Labs Permanent URL: https://openedx.org/CVE-2015-2286 On January 11, 2015 a security vulnerability was reported by Smit B. Shah and Nikhil Srivastava that caused password reset tokens to be forwarded to third-party social networks in the…