CVE-2025-26532
Teachers can evade trusttext config when restoring glossary entries
概要
Teachers can evade trusttext config when restoring glossary entries
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.16"},{"introduced":"4.3.0"},{"fixed":"4.3.10"},{"introduced":"4.4.0"},{"fixed":"4.4.6"},{"introduced":"4.5.0"},{"fixed":"4.5.2"}]}]
参照URL
- advisory moodle.org
- advisory nvd.nist.gov
- advisory github.com
- patch git.moodle.org