Lucene search

K
vulnrichmentFedoraVULNRICHMENT:CVE-2024-34000
HistoryMay 31, 2024 - 8:01 p.m.

CVE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

2024-05-3120:01:11
CWE-79
fedora
github.com
2
moodle
stored xss
lesson overview
user id
sanitizing
risk
cve-2024-34000

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial