ALT-PU-2019-2248: package moodle update to version 3.7.1-alt1
Описание
This update upgrades moodle to version 3.7.1-alt1.
Устраненные уязвимости5
Ссылки5
GHSA-2mg9-hv69-897x
https://github.com/advisories/GHSA-2mg9-hv69-897xGHSA-92q5-2h76-vgmj
https://github.com/advisories/GHSA-92q5-2h76-vgmjGHSA-h7xp-7fjp-ghhc
https://github.com/advisories/GHSA-h7xp-7fjp-ghhcGHSA-wv9c-pfpm-4wc5
https://github.com/advisories/GHSA-wv9c-pfpm-4wc5Связанные уязвимости
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool.
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool.
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sess ...
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.