ALT-PU-2024-9067: package moodle update to version 4.3.5-alt1
Описание
This update upgrades moodle to version 4.3.5-alt1.
Устраненные уязвимости33
Ссылки36
GHSA-356g-7x36-7m34
https://github.com/advisories/GHSA-356g-7x36-7m34GHSA-487g-3m3v-hjhq
https://github.com/advisories/GHSA-487g-3m3v-hjhqGHSA-4qww-rxq6-x7gf
https://github.com/advisories/GHSA-4qww-rxq6-x7gfGHSA-68x5-4jg5-gjgg
https://github.com/advisories/GHSA-68x5-4jg5-gjggGHSA-6vjf-48fh-vxxj
https://github.com/advisories/GHSA-6vjf-48fh-vxxjGHSA-7pjp-fm93-p6pj
https://github.com/advisories/GHSA-7pjp-fm93-p6pjGHSA-8g5h-gjwq-w5ch
https://github.com/advisories/GHSA-8g5h-gjwq-w5chGHSA-8qwh-4vwv-7c5m
https://github.com/advisories/GHSA-8qwh-4vwv-7c5mGHSA-9qgq-93c7-9hm4
https://github.com/advisories/GHSA-9qgq-93c7-9hm4GHSA-9r26-5w88-qhp9
https://github.com/advisories/GHSA-9r26-5w88-qhp9GHSA-cp8m-h777-g4p3
https://github.com/advisories/GHSA-cp8m-h777-g4p3GHSA-gq9f-8rj4-w7jc
https://github.com/advisories/GHSA-gq9f-8rj4-w7jcGHSA-gwf6-q6c2-94p3
https://github.com/advisories/GHSA-gwf6-q6c2-94p3GHSA-jfrg-9hpq-9hvp
https://github.com/advisories/GHSA-jfrg-9hpq-9hvpGHSA-jg4f-8w9x-jv35
https://github.com/advisories/GHSA-jg4f-8w9x-jv35GHSA-mm9p-xwfm-3fqf
https://github.com/advisories/GHSA-mm9p-xwfm-3fqfGHSA-p2cj-86v4-7782
https://github.com/advisories/GHSA-p2cj-86v4-7782GHSA-p5cg-6rfr-6mx8
https://github.com/advisories/GHSA-p5cg-6rfr-6mx8GHSA-q3cm-ccrm-2mr6
https://github.com/advisories/GHSA-q3cm-ccrm-2mr6GHSA-r2wx-46gp-rp3h
https://github.com/advisories/GHSA-r2wx-46gp-rp3hGHSA-r82w-3phg-qvr4
https://github.com/advisories/GHSA-r82w-3phg-qvr4GHSA-r99q-hmqv-xw8w
https://github.com/advisories/GHSA-r99q-hmqv-xw8wGHSA-vvh5-7v3m-j3mj
https://github.com/advisories/GHSA-vvh5-7v3m-j3mjGHSA-x29x-qwvx-fxr2
https://github.com/advisories/GHSA-x29x-qwvx-fxr2GHSA-xqhh-253w-4q5f
https://github.com/advisories/GHSA-xqhh-253w-4q5fСвязанные уязвимости
ALT-PU-2024-8851: package `moodle` update to version 4.3.5-alt1
Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."
Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."
Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflecte ...
** DISPUTED ** Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."