CVE-2017-18381

CVE-2017-18381 describes a critical misconfiguration in Open edX installations prior to January 10, 2017, where the MongoDB instance was exposed to external connections using default credentials. This vulnerability carries a CVSS score of 7.2 (HIGH), indicating that an unauthenticated attacker could achieve full confidentiality, integrity, and availability compromise of the affected system over the network with low attack complexity. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.