CVE-2024-34006
moodle: unsanitized HTML in site log for config_log_created
Résumé
moodle: unsanitized HTML in site log for config_log_created
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.10"},{"introduced":"4.2.0"},{"fixed":"4.2.7"},{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org