CVE-2023-28331

Moodle: xss risk when outputting database activity filter data

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.20"},{"introduced":"3.11.0"},{"fixed":"3.11.13"},{"introduced":"4.0.0"},{"fixed":"4.0.7"},{"introduced":"4.1.0"},{"fixed":"4.1.2"}]}]

Références

advisory moodle.org
web lists.fedoraproject.org
web bugzilla.redhat.com
web nvd.nist.gov