Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2214369 - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A72KX4WU6GK2CX4TKYFGFASPKOEOJFC/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5QAEAGJ44NVXLAJFJXKARKC45OGEDXT/ - | |
| References | () https://moodle.org/mod/forum/discuss.php?d=447829 - Patch, Vendor Advisory |
19 Apr 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Nov 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
30 Jun 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jun 2023, 20:37
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| First Time |
Moodle moodle
Moodle |
|
| CPE | cpe:2.3:a:moodle:moodle:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://moodle.org/mod/forum/discuss.php?d=447829 - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
22 Jun 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-22 21:15
Updated : 2024-11-21 08:07
NVD link : CVE-2023-35131
Mitre link : CVE-2023-35131
CVE.ORG link : CVE-2023-35131
JSON object : View
Products Affected
moodle
- moodle
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')