Linux Distros Unpatched Vulnerability : CVE-2019-3847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the login as other users capability such as administrators/manage...

CVE-2019-3847

CVE-2019-3847 affects Moodle up to versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. The vulnerability allows any user with the “login as other users” capability (e.g., admins/managers) to view other users’ Dashboards, but any JavaScript those users added to their Dashboard is not escaped when rendered un...