OPENSUSE-SU-2021:1603-1 Security update for netdata

This update for netdata fixes the following issues: Update to 1.31.0 go.d.plugin 0.29.0 The v1.31.0 release of Netdata comes with re-packaged and redesigned elements of the dashboard to help you focus on your metrics, even more Linux kernel insights via eBPF, on-node machine learning to help you...

The vulnerability in the virtual learning environment Moodle arises from insufficient cleaning of data provided by users at the final authentication stage of LTI. This allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability in the virtual learning environment Moodle exists due to insufficient cleaning of data provided by users at the final authentication stage of LTI. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Moodle 输入验证错误漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an input validation error vulnerability that stems from insufficient innocent handling of user-supplied data in th...

PT-2022-5980 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A blind Server-Side Request Forgery SSRF vulnerability was found due to insufficient validation of user-supplied input in the LTI provider library. The library does not utilize Moodle's...

PT-2022-4074 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A reflected XSS issue was identified in the LTI module of Moodle due to insufficient sanitization of user-supplied data. A remote attacker can trick the victim into following a specially...