CVE-2023-5541
Moodle: xss risk when using csv grade import method
Résumé
Moodle: xss risk when using csv grade import method
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.24"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"4.0.0"},{"fixed":"4.0.11"},{"introduced":"4.1.0"},{"fixed":"4.1.6"},{"introduced":"4.2.0"},{"fixed":"4.2.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org