CVE-2024-33997
moodle: stored XSS risk when editing another user's equation in equation editor
Summary
moodle: stored XSS risk when editing another user's equation in equation editor
Original description
The description as published by the source.
Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.10"},{"introduced":"4.2.0"},{"fixed":"4.2.7"},{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org