Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2365
HistoryJul 21, 2012 - 12:00 a.m.

CVE-2012-2365

2012-07-2100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

45.6%

Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9,
2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated
users to inject arbitrary web script or HTML via the idnumber field to
cohort/edit.php.

Notes

Author Note
jdstrand moodle 2.0 and higher

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

45.6%