6 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-34006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...
CVE-2024-34006
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...
CVE-2024-34006
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...
CVE-2024-34006 moodle: unsanitized HTML in site log for config_log_created
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...
CVE-2024-34006
CVE-2024-34006 affects Moodle via the site log log entry (config_log_created) where descriptions contain raw HTML. The root cause is unsanitized HTML in log content, enabling potential cross-site scripting. Documents reference OSV/GHSA entries and Moodle advisories confirming the issue; no explic...
CVE-2024-34006 moodle: unsanitized HTML in site log for config_log_created
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...