ALT-PU-2021-2787

Низкий

ALT-PU-2021-2787: package moodle update to version 3.11.3-alt1

Источник

errata.altlinux.org

Дата публикации

13.09.2021

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades moodle to version 3.11.3-alt1.

Устраненные уязвимости5

CVE-2021-40691

Средний 4.3

Дата публикации: 29.09.2022

A session hijack risk was identified in the Shibboleth authentication plugin.

CVSS 3.1

Средний 4.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None

Ссылки

CVE-2021-40691 https://nvd.nist.gov/vuln/detail/CVE-2021-40691

Ссылки6

ALT-PU-2021-2787 https://errata.altlinux.org/ALT-PU-2021-2787

GHSA-2jxg-mv2m-j4r7

https://github.com/advisories/GHSA-2jxg-mv2m-j4r7

GHSA-92vh-mr2w-j2cr

https://github.com/advisories/GHSA-92vh-mr2w-j2cr

GHSA-gp4w-f57r-9rx3

https://github.com/advisories/GHSA-gp4w-f57r-9rx3

GHSA-m37g-mwcg-7j7v

https://github.com/advisories/GHSA-m37g-mwcg-7j7v

GHSA-wr6q-xv23-rfq9

https://github.com/advisories/GHSA-wr6q-xv23-rfq9

Связанные уязвимости

ALT-PU-2021-3335

CVSS3: 9.8

altlinux

почти 5 лет назад

ALT-PU-2021-3335: package `moodle` update to version 3.11.4-alt1

CVE-2021-40691

CVSS3: 4.3

ubuntu

около 4 лет назад

A session hijack risk was identified in the Shibboleth authentication plugin.

CVE-2021-40691

CVSS3: 4.3

nvd

около 4 лет назад

A session hijack risk was identified in the Shibboleth authentication plugin.

CVE-2021-40691

CVSS3: 4.3

debian

около 4 лет назад

A session hijack risk was identified in the Shibboleth authentication ...

GHSA-92vh-mr2w-j2cr

CVSS3: 4.3

github

около 4 лет назад

Moodle Improper Authentication