BIT-MOODLE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers...

CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers...

CVE-2022-30354

OvalEdge versions 5.2.8.0 and earlier are vulnerable to Sensitive Data Exposure via a GET request to the /user/getUserWithTeam endpoint. This vulnerability requires authentication and allows for the disclosure of sensitive information associated with all registered user ID numbers . While no spec...

CVE-2022-30354: Incorrect Permission Assignment for Critical Resource

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers...