CVE-2022-30596

🗓️ 18 May 2022 16:59:52Reported by fedoraType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 138 Views

Flaw in Moodle requiring additional sanitizing to prevent stored XSS ris

Reporter	Title	Published	Views	Family All 35
ATTACKERKB	CVE-2022-30596	18 May 202217:15	–	attackerkb
CNNVD	Moodle 跨站脚本漏洞	17 May 202200:00	–	cnnvd
Cvelist	CVE-2022-30596	18 May 202216:59	–	cvelist
EUVD	EUVD-2022-5645	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 35 Update: moodle-3.11.7-1.fc35	27 May 202201:12	–	fedora
Fedora	[SECURITY] Fedora 36 Update: moodle-3.11.7-1.fc36	27 May 202201:10	–	fedora
Fedora	[SECURITY] Fedora 34 Update: moodle-3.11.7-1.fc34	27 May 202201:03	–	fedora
Github Security Blog	Cross-site Scripting in moodle	19 May 202200:00	–	github
NVD	CVE-2022-30596	18 May 202217:15	–	nvd
OpenVAS	Fedora: Security Advisory for moodle (FEDORA-2022-530fdc5202)	28 May 202200:00	–	openvas

NVD

Node

moodle moodleRange3.9–3.9.14

moodle moodleRange3.10–3.10.11

moodle moodleRange3.11–3.11.7

moodle moodleMatch4.0.0-

Node

redhat enterprise_linuxMatch8.0-

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

[
  {
    "product": "moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affects : 4.0, 3.11 to 3.11.6, 3.10 to 3.10.10, 3.9 to 3.9.13 and earlier unsupported versions"
      }
    ]
  }
]

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIMSIRKCFLIC646K4GMUSZU7THOUVPAJ/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGF35EN5K2R6X3NTY3XPZSJ3UDASMXI6/
git	www.git.moodle.org/gw
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCTWSE3JDMSYL7DPCMXMMJEXZSS6VIA5/

21 Nov 2024 07:02Current

6.7Medium risk

Vulners AI Score6.7

CVSS 23.5

CVSS 3.15.4

EPSS0.00875

CWE-79