Lucene search
GoogleOSV:GHSA-JQGR-GH62-JF53HistoryOct 01, 2022 - 12:00 a.m.
Moodle Stored Cross-site Scripting and page denial of service
2022-10-0100:00:20
Google
osv.dev
4
moodle
stored cross-site scripting
cross-site scripting
page denial of service
mustache template
user input
software
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
38.5%
Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an Cross-site Scripting risk or a page failing to load.
Related
prion
prion
Default credentials
2022-09-30 17:15:00
nvd
nvd
CVE-2022-40313
2022-09-30 17:15:13
cvelist
cvelist
CVE-2022-40313
2022-09-30 16:34:00
osv
osv
CVE-2022-40313
2022-09-30 17:15:13
BIT-moodle-2022-40313
2024-03-06 11:02:59
veracode
veracode
Cross-site Scripting (XSS)
2022-10-03 06:14:14
ubuntucve
ubuntucve
CVE-2022-40313
2022-09-30 00:00:00
github
github
Moodle Stored Cross-site Scripting and page denial of service
2022-10-01 00:00:20
cve
cve
CVE-2022-40313
2022-09-30 17:15:13
nessus
nessus
Moodle 3.11.x < 3.11.10 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 4.0.x < 4.0.4 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.17 Multiple Vulnerabilities
2023-02-20 00:00:00
openvas
openvas
Moodle < 3.9.17, 3.11 < 3.11.10, 4.0 < 4.0.4 Multiple Vulnerabilities
2022-10-10 00:00:00
redos
redos
ROS-20221013-02
2022-10-13 00:00:00
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
38.5%
Related for OSV:GHSA-JQGR-GH62-JF53