Lucene search

K
cvelistRedhatCVELIST:CVE-2012-2364
HistoryJul 21, 2012 - 1:00 a.m.

CVE-2012-2364

2012-07-2101:00:00
redhat
www.cve.org
6

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

29.4%

Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via an assignment submission with zip compression, leading to text/html rendering during a “download all” action.

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

29.4%