CVE-2025-26532
Teachers can evade trusttext config when restoring glossary entries
Résumé
Teachers can evade trusttext config when restoring glossary entries
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.16"},{"introduced":"4.3.0"},{"fixed":"4.3.10"},{"introduced":"4.4.0"},{"fixed":"4.4.6"},{"introduced":"4.5.0"},{"fixed":"4.5.2"}]}]
Références
- advisory moodle.org
- advisory nvd.nist.gov
- advisory github.com
- patch git.moodle.org