CVE-2020-1756
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.5.0"},{"fixed":"3.5.11"},{"introduced":"3.6.0"},{"fixed":"3.6.9"},{"introduced":"3.7.0"},{"fixed":"3.7.5"},{"introduced":"3.8.0"},{"fixed":"3.8.2"}]}]
参照URL
- advisory moodle.org
- web nvd.nist.gov