618 matches found
Moodle vulnerable to Cross-site Scripting
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
GHSA-77JM-F3VJ-XVX2 Moodle vulnerable to Cross-site Scripting
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28331
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28331
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
Cross site scripting
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
Design/Logic Flaw
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
UBUNTU-CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
CVE-2023-28331 Moodle: xss risk when outputting database activity filter data
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28331 Moodle: xss risk when outputting database activity filter data
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28331
CVE-2023-28331 affects Moodle scenarios where the web app outputs database activity or auto-linking content. The concrete detail in the connected documents shows a root cause of an XSS risk due to insufficient sanitization in the database auto-linking filter output. This content could lead to cro...
CVE-2023-28330
CVE-2023-28330: In Moodle, insufficient sanitizing in the backup feature enables an authenticated arbitrary file read. Access to this backup-related capability is restricted by default to teachers, managers, and admins. Connected documents corroborate a backup-file read risk and reference unpatch...
Debian: Security Advisory (DLA-40-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-357-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-5370-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-79JP-M64F-PGRC Moodle Cross-site Scripting vulnerability
In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...