CVE-2016-0725

{"id": "CVE-2016-0725", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2016-02-22T05:59:22.527", "references": [{"url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2016/01/18/1", "source": "secalert@redhat.com"}, {"url": "http://www.securitytracker.com/id/1034694", "source": "secalert@redhat.com"}, {"url": "https://moodle.org/mod/forum/discuss.php?d=326206", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2016/01/18/1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1034694", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://moodle.org/mod/forum/discuss.php?d=326206", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string."}, {"lang": "es", "value": "Vulnerabilidad de XSS en la funci\u00f3n search_pagination en course/classes/management_renderer.php en Moodle 2.8.x en versiones anteriores a 2.8.10, 2.9.x en versiones anteriores a 2.9.4 y 3.0.x en versiones anteriores a 3.0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s de una cadena de b\u00fasqueda manipulada."}], "lastModified": "2024-11-21T02:42:15.483", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12737AF4-B2D5-4661-B06A-6A06FE95EC2D"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88C59A94-D225-478A-B23E-41C4324BC643"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D88385B1-EEFB-4825-BD8F-215C39FD86DA"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3BE2782-D167-4237-B57D-2E4C04571524"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F277F979-12FA-47A5-B0A5-D174C2127A7D"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38498617-8E45-4E73-AE9F-C7A0D18FDE47"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9047769-BFF4-42DB-8B19-F6D16FA910A1"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73A75ACE-FED2-4830-B259-744ABF25463E"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F04EBA18-DFFF-4529-B647-98191325663B"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9224D94-1C48-468C-A39B-B2694ED178F4"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C7EE9AD-E122-4288-9416-6D8F8790D75D"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4FC2CC1-787B-480F-BC41-538CE2507CB7"}, {"criteria": "cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "098BADF2-C1D3-406E-9E79-E25483178C99"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C22EB95-6D8F-45F8-A000-795E259CF06D"}, {"criteria": "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}