CVE-2024-34000
moodle: stored XSS in lesson overview report via user ID number
Résumé
moodle: stored XSS in lesson overview report via user ID number
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.10"},{"introduced":"4.2.0"},{"fixed":"4.2.7"},{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org