ALT-PU-2021-1777

Высокий

ALT-PU-2021-1777: package moodle update to version 3.10.4-alt1

Источник

errata.altlinux.org

Дата публикации

10.05.2021

Дата обновления

07.03.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades moodle to version 3.10.4-alt1.

Устраненные уязвимости17

BDU:2021-02734

Средний 6.1

Дата публикации: 01.06.2021

Уязвимость виртуальной обучающей среды Moodle, существующая из-за недостаточной очистки предоставленных пользователем данных в конечной точке авторизации LTI, позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)

CVSS 3.1

Средний 6.1

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

CVSS 2.0

Средний 6.4

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: None

Ссылки

BDU:2021-02734 https://bdu.fstec.ru/vul/2021-02734

Ссылки9

ALT-PU-2021-1777 https://errata.altlinux.org/ALT-PU-2021-1777

GHSA-454r-jccq-96q8

https://github.com/advisories/GHSA-454r-jccq-96q8

GHSA-4qxc-qxrp-33cw

https://github.com/advisories/GHSA-4qxc-qxrp-33cw

GHSA-5wjh-v7c8-wrhx

https://github.com/advisories/GHSA-5wjh-v7c8-wrhx

GHSA-78fm-qhh8-8858

https://github.com/advisories/GHSA-78fm-qhh8-8858

GHSA-g5m5-j48g-fr24

https://github.com/advisories/GHSA-g5m5-j48g-fr24

GHSA-rvmc-8gmg-ggqr

https://github.com/advisories/GHSA-rvmc-8gmg-ggqr

GHSA-vrpr-2xxx-g444

https://github.com/advisories/GHSA-vrpr-2xxx-g444

GHSA-wx87-h539-4775

https://github.com/advisories/GHSA-wx87-h539-4775

Связанные уязвимости

CVE-2021-32244

CVSS3: 5.4

ubuntu

больше 5 лет назад

Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.

CVE-2021-32244

CVSS3: 5.4

nvd

больше 5 лет назад

Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.

CVE-2021-32244

CVSS3: 5.4

debian

больше 5 лет назад

Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to ...

GHSA-g5m5-j48g-fr24

CVSS3: 5.4

github

больше 4 лет назад

Moodle Cross Site Scripting (XSS)

CVE-2021-32472

CVSS3: 4.3

ubuntu

больше 4 лет назад

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected.