CVE-2023-5544
Moodle: stored xss and potential idor risk in wiki comments
Résumé
Moodle: stored xss and potential idor risk in wiki comments
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.24"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"4.0.0"},{"fixed":"4.0.11"},{"introduced":"4.1.0"},{"fixed":"4.1.6"},{"introduced":"4.2.0"},{"fixed":"4.2.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org