Lucene search
FedoraVULNRICHMENT:CVE-2023-5547HistoryNov 09, 2023 - 7:35 p.m.
CVE-2023-5547 Moodle: xss risk when previewing data in course upload tool
2023-11-0919:35:24
CWE-79
fedora
github.com
3
moodle
upload tool
xss
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6.1
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
The course upload preview contained an XSS risk for users uploading unsafe data.
Related
cvelist
cvelist
CVE-2023-5547 Moodle: xss risk when previewing data in course upload tool
2023-11-09 19:35:24
github
github
Moodle Cross-site Scripting vulnerability
2023-11-09 21:30:39
nvd
nvd
CVE-2023-5547
2023-11-09 20:15:10
osv
osv
BIT-moodle-2023-5547
2024-03-06 10:57:21
Moodle Cross-site Scripting vulnerability
2023-11-09 21:30:39
CVE-2023-5547
2023-11-09 20:15:10
ubuntucve
ubuntucve
CVE-2023-5547
2023-11-09 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2023-11-13 12:52:26
prion
prion
Design/Logic Flaw
2023-11-09 20:15:00
cve
cve
CVE-2023-5547
2023-11-09 20:15:10
openvas
openvas
Moodle < 3.9.24, 3.11.x < 3.11.17, 4.0.x < 4.0.11, 4.1.x < 4.1.6, 4.2.x < 4.2.3 Multiple Vulnerabilities
2023-10-23 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2023-a7b0d27d18)
2023-10-20 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2023-6880309d0e)
2023-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: moodle-4.1.6-1.fc37
2023-10-19 01:35:51
[SECURITY] Fedora 38 Update: moodle-4.1.6-1.fc38
2023-10-19 01:11:55
[SECURITY] Fedora 39 Update: moodle-4.3-1.fc39
2023-11-03 18:56:16
nessus
nessus
Fedora 38 : moodle (2023-6880309d0e)
2023-10-19 00:00:00
Fedora 37 : moodle (2023-a7b0d27d18)
2023-10-19 00:00:00
Fedora 39 : moodle (2023-6bd1586dc5)
2023-11-07 00:00:00
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6.1
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-5547