ALT-PU-2019-2080: package moodle update to version 3.7.0-alt1
Описание
This update upgrades moodle to version 3.7.0-alt1.
Устраненные уязвимости3
Ссылки4
GHSA-5xp2-rv4h-mm2q
https://github.com/advisories/GHSA-5xp2-rv4h-mm2qGHSA-j8wr-7xxj-c2fr
https://github.com/advisories/GHSA-j8wr-7xxj-c2frGHSA-ww45-x87c-wgff
https://github.com/advisories/GHSA-ww45-x87c-wgffСвязанные уязвимости
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to internal URLs.
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to internal URLs.
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. ...
A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.