Lucene search

CVE-2024-33997 moodle: stored XSS risk when editing another user's equation in equation editor

🗓️ 31 May 2024 19:17:38Reported by fedoraType

Stored XSS risk when editing another user's equation in moodl

Reporter	Title	Published	Views	Family All 10
Vulnrichment	CVE-2024-33997 moodle: stored XSS risk when editing another user's equation in equation editor	31 May 202419:38	–	vulnrichment
NVD	CVE-2024-33997	31 May 202420:15	–	nvd
OSV	Moodle stored Cross-site Scripting (XSS)	31 May 202421:30	–	osv
OSV	CVE-2024-33997	31 May 202420:15	–	osv
UbuntuCve	CVE-2024-33997	31 May 202400:00	–	ubuntucve
Github Security Blog	Moodle stored Cross-site Scripting (XSS)	31 May 202421:30	–	github
CVE	CVE-2024-33997	31 May 202420:15	–	cve
Veracode	Cross-site Scripting (XSS)	7 Jun 202406:37	–	veracode
OpenVAS	Moodle < 4.1.10, 4.2.x < 4.2.7, 4.3.x < 4.3.4 Multiple Vulnerabilities	14 May 202400:00	–	openvas
Redos	ROS-20240701-03	1 Jul 202400:00	–	redos

[
  {
    "collectionURL": "https://git.moodle.org",
    "packageName": "Moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.0",
        "lessThanOrEqual": "4.3.3",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.2",
        "lessThanOrEqual": "4.2.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.1",
        "lessThanOrEqual": "4.1.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 May 2024 19:38Current

5.4Medium risk

Vulners AI Score5.4

EPSS0.0004

CWE-79