Lucene search

K

RedhatCVELIST:CVE-2013-1833

HistoryMar 25, 2013 - 9:00 p.m.

CVE-2013-1833

2013-03-2521:00:00

redhat

www.cve.org

7

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

43.9%

Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename.

References

git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37507

lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html

lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html

openwall.com/lists/oss-security/2013/03/25/2

moodle.org/mod/forum/discuss.php?d=225344

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

43.9%

Related for CVELIST:CVE-2013-1833

nvd1 ubuntucve1 github1 prion1 cve1 veracode1 osv1 nessus2 openvas4 fedora2