Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export
Résumé
Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Références
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org
- web github.com