CVE-2023-23922

Moodle: reflected xss risk in blog search

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in blog search. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.0.6"},{"introduced":"4.1.0"},{"fixed":"4.1.1"}]}]

Références

advisory bugzilla.redhat.com
advisory moodle.org
patch git.moodle.org
web nvd.nist.gov