Логотип exploitDog
bind:CVE-2019-3847
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-3847

Количество 4

Количество 4

ubuntu логотип

CVE-2019-3847

около 6 лет назад

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.

CVSS3: 4.8
EPSS: Низкий
nvd логотип

CVE-2019-3847

около 6 лет назад

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.

CVSS3: 4.8
EPSS: Низкий
debian логотип

CVE-2019-3847

около 6 лет назад

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4. ...

CVSS3: 4.8
EPSS: Низкий
github логотип

GHSA-qrcj-6fjw-3h9h

около 3 лет назад

Moodle XSS Vulnerability

CVSS3: 4.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-3847

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.

CVSS3: 4.8
1%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-3847

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.

CVSS3: 4.8
1%
Низкий
около 6 лет назад
debian логотип
CVE-2019-3847

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4. ...

CVSS3: 4.8
1%
Низкий
около 6 лет назад
github логотип
GHSA-qrcj-6fjw-3h9h

Moodle XSS Vulnerability

CVSS3: 4.8
1%
Низкий
около 3 лет назад

Уязвимостей на страницу