Описание
If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk.
Ссылки
- Issue TrackingPatchVendor Advisory
- Issue TrackingPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.9.0 (исключая) до 3.9.20 (исключая)Версия от 3.11.0 (исключая) до 3.11.13 (исключая)Версия от 4.0.0 (исключая) до 4.0.7 (исключая)
Одно из
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00487
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79
Связанные уязвимости
CVSS3: 6.1
ubuntu
около 2 лет назад
If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk.
CVSS3: 6.1
debian
около 2 лет назад
If the algebra filter was enabled but not functional (eg the necessary ...
CVSS3: 6.1
github
около 2 лет назад
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
EPSS
Процентиль: 64%
0.00487
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79