Поиск уязвимостей
Количество 9
Количество 9
CVE-2023-23921
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks.
CVE-2023-23921
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks.
CVE-2023-23921
The vulnerability was found Moodle which exists due to insufficient sa ...
GHSA-97qf-pq7x-964m
Moodle Cross-site Scripting vulnerability
BDU:2023-03478
Уязвимость виртуальной обучающей среды Moodle, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
ROS-20230627-01
Множественные уязвимости moodle
ALT-PU-2023-2057
ALT-PU-2023-2057: package `moodle` update to version 3.11.15-alt1
ALT-PU-2023-2012
ALT-PU-2023-2012: package `moodle` update to version 3.11.15-alt1
ALT-PU-2020-3235
ALT-PU-2020-3235: package `moodle` update to version 3.10.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-23921 The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks. | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-23921 The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks. | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-23921 The vulnerability was found Moodle which exists due to insufficient sa ... | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
| GHSA-97qf-pq7x-964m Moodle Cross-site Scripting vulnerability | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
 | BDU:2023-03478 Уязвимость виртуальной обучающей среды Moodle, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
 | ROS-20230627-01 Множественные уязвимости moodle | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-2057 ALT-PU-2023-2057: package `moodle` update to version 3.11.15-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-2012 ALT-PU-2023-2012: package `moodle` update to version 3.11.15-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2020-3235 ALT-PU-2020-3235: package `moodle` update to version 3.10.0-alt1 | CVSS3: 9.8 | около 6 лет назад |
Уязвимостей на страницу