Lucene search
GitHub Advisory DatabaseGHSA-VVH5-7V3M-J3MJHistoryMay 31, 2024 - 9:30 p.m.
Moodle Unsanitized HTML in site log for config_log_created
2024-05-3121:30:55
CWE-838
GitHub Advisory Database
github.com
moodle
event descriptions
html
plaintext
software
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.
Affected configurations
Node
moodlemoodleRange<4.1.10
ORmoodlemoodleRange<4.2.7
ORmoodlemoodleRange<4.3.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | lt | 4.1.10 | |
| moodle/moodle | lt | 4.2.7 | |
| moodle/moodle | lt | 4.3.4 |
Related
osv
osv
Moodle Unsanitized HTML in site log for config_log_created
2024-05-31 21:30:55
nvd
nvd
CVE-2024-34006
2024-05-31 21:15:09
cve
cve
CVE-2024-34006
2024-05-31 21:15:09
ubuntucve
ubuntucve
CVE-2024-34006
2024-05-31 00:00:00
vulnrichment
vulnrichment
CVE-2024-34006 moodle: unsanitized HTML in site log for config_log_created
2024-05-31 20:36:08
cvelist
cvelist
CVE-2024-34006 moodle: unsanitized HTML in site log for config_log_created
2024-05-31 20:36:08
openvas
openvas
Moodle < 4.1.10, 4.2.x < 4.2.7, 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00