CVE-2025-67849
Moodle: moodle: cross-site scripting (xss) via improper sanitization of ai prompt responses
概要
Moodle: moodle: cross-site scripting (xss) via improper sanitization of ai prompt responses
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.5.0"},{"fixed":"4.5.8"},{"introduced":"5.0.0"},{"fixed":"5.0.4"},{"introduced":"5.1.0"},{"fixed":"5.1.1"}]}]
参照URL
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web github.com