Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3810

Опубликовано: 25 мар. 2019
Источник: nvd
CVSS3: 4.3
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
Версия от 3.1.0 (включая) до 3.1.15 (включая)
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
Версия от 3.4.0 (включая) до 3.4.6 (включая)
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
Версия от 3.5.0 (включая) до 3.5.3 (включая)
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
Версия от 3.6.0 (включая) до 3.6.1 (включая)

EPSS

Процентиль: 91%
0.07714
Низкий

4.3 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79
CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2019-3810

CVSS3: 6.1
ubuntu
около 6 лет назад

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.

debian логотип

CVE-2019-3810

CVSS3: 6.1
debian
около 6 лет назад

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to ...

github логотип

GHSA-wm4w-8vc6-2j4h

CVSS3: 5.3
github
около 3 лет назад

Moodle XSS Vulnerability

EPSS

Процентиль: 91%
0.07714
Низкий

4.3 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79
CWE-79