Security Patch for edX-ECommerce: 2016-08-08

[Simon Chen]

Hello all:

I want to let you know that we've just released a security patch for edx-ecommerce service. The patch removes the public access to the ecommerce catalogue directory and it’s content. A user before the fix can take advantage of the visibility and use any edx course coupons to checkout enrollment seats.

Please see the fix here https://github.com/edx/ecommerce/commit/5ddce0941bc9521bd52b0bd68d531daf04500942

Thanks, and please let me know if you have any questions!

Best

Simon Chen

sc...@edx.org