Lucene search

K
osvGoogleOSV:CVE-2018-1136
HistoryMay 25, 2018 - 12:29 p.m.

CVE-2018-1136

2018-05-2512:29:00
Google
osv.dev
4

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

21.6%

An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerability, users can move such a block to other pages where they can be viewed by other users.

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

21.6%