Lucene search

K
osvGoogleOSV:BIT-MOODLE-2022-40313
HistoryMar 06, 2024 - 11:02 a.m.

BIT-moodle-2022-40313

2024-03-0611:02:59
Google
osv.dev
20
bit moodle software

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

38.5%

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load.

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

38.5%