Описание
Moodle Improper Encoding or Escaping of Output
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
Пакеты
moodle/moodle
>= 3.9, < 3.9.10
3.9.10
moodle/moodle
>= 3.10, < 3.10.7
3.10.7
moodle/moodle
>= 3.11, < 3.11.3
3.11.3
Связанные уязвимости
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
Insufficient escaping of the LaTeX preamble made it possible for site ...
ALT-PU-2021-2787: package `moodle` update to version 3.11.3-alt1
ALT-PU-2021-3335: package `moodle` update to version 3.11.4-alt1