ALT-PU-2021-1050: package moodle update to version 3.10.1-alt1
Описание
This update upgrades moodle to version 3.10.1-alt1.
Устраненные уязвимости13
Ссылки7
GHSA-2jrm-gww7-wch2
https://github.com/advisories/GHSA-2jrm-gww7-wch2GHSA-c3j6-33r4-89q3
https://github.com/advisories/GHSA-c3j6-33r4-89q3GHSA-c7jj-vfmr-j9mj
https://github.com/advisories/GHSA-c7jj-vfmr-j9mjGHSA-h8m4-h385-qhqv
https://github.com/advisories/GHSA-h8m4-h385-qhqvGHSA-mm73-86f9-5x5c
https://github.com/advisories/GHSA-mm73-86f9-5x5cGHSA-xhfx-rm8q-c3xv
https://github.com/advisories/GHSA-xhfx-rm8q-c3xvСвязанные уязвимости
It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
It was found in Moodle before version 3.10.1 that some search inputs w ...
Moodle Vulnerable to Reflected Cross-site Scripting
Уязвимость виртуальной обучающей среды Moodle, связанная с недостаточной очисткой введенных пользователем данных в определенных поисковых запросах, позволяющая нарушителю проводить межсайтовые сценарные атаки