CVE-2023-5546
Moodle: stored xss in quiz grading report via user id number
Résumé
Moodle: stored xss in quiz grading report via user id number
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.0.11"},{"introduced":"4.1.0"},{"fixed":"4.1.6"},{"introduced":"4.2.0"},{"fixed":"4.2.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org