CVE-2022-46147
Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields
概要
Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contains a patch for this issue. There are no known workarounds.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com