PT-2015-1577 · Moodle · Moodle

Eloy Lafuente · Publicado 2015-05-18 · Atualizado 2022-05-13 · CVE-2015-3178

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.5.10 Moodle versions 2.6.x through 2.6.10 Moodle versions 2.7.x through 2.7.7 Moodle versions 2.8.x through 2.8.5

Description A cross-site scripting (XSS) issue exists due to insufficient protection of the web page structure. This allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.

Recommendations For versions prior to 2.5.10, update to version 2.5.10 or later. For versions 2.6.x through 2.6.10, update to version 2.6.11 or later. For versions 2.7.x through 2.7.7, update to version 2.7.8 or later. For versions 2.8.x through 2.8.5, update to version 2.8.6 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2015-10891

CVE-2015-3178

GHSA-9FMW-M4QX-6CQ8

MGASA-2015-0229

Produtos afetados

Moodle

Referências · 32

• https://github.com/moodle/moodle · Nota
• https://github.com/moodle/moodle/commit/b4da1e0ae4f63ef0bb14b8bf5c0b86cd00f2af4b · Nota
• https://github.com/moodle/moodle/commit/d62d36c657a5df45ee286722490abb7901381da6 · Nota
• https://github.com/moodle/moodle/commit/7f5bd0da0e25feb3b6da3908b6672a58af82e12f · Nota
• https://github.com/moodle/moodle/commit/2c7d13dba37aa0c850c62037b951efd6dc1b0f78 · Nota
• https://github.com/moodle/moodle/commit/28947c1d7d9c53781989b9da7ceb2cafdd144749 · Nota
• https://github.com/moodle/moodle/commit/77067fbb3a248ac2f1fa4b3c20e5b81f768940e5 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=15909 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3178 · Aviso do Fabricante
• http://securitytracker.com/id/1032358 · Nota
• https://moodle.org/mod/forum/discuss.php?d=313687 · Nota
• https://osv.dev/vulnerability/GHSA-9fmw-m4qx-6cq8 · Aviso do Fabricante
• https://moodle.org/mod/forum/discuss.php?d=313686 · Nota
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49718 · Nota
• https://moodle.org/mod/forum/discuss.php?d=313683 · Nota