PT-2015-1618 · Moodle · Moodle

Tim Hunt

·

Publicado

2015-03-18

·

Atualizado

2022-05-13

·

CVE-2015-2273

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.5.10 Moodle versions 2.6.x through 2.6.8 Moodle versions 2.7.x through 2.7.5 Moodle versions 2.8.x through 2.8.3
Description A cross-site scripting (XSS) issue exists due to insufficient protection of the web page structure. This allows a remote attacker to inject arbitrary web script or HTML by manipulating input data, potentially leveraging the student role for a crafted quiz response.
Recommendations For versions prior to 2.5.10, update to version 2.5.10 or later. For versions 2.6.x through 2.6.8, update to version 2.6.9 or later. For versions 2.7.x through 2.7.5, update to version 2.7.6 or later. For versions 2.8.x through 2.8.3, update to version 2.8.4 or later.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2015-10953
CVE-2015-2273
GHSA-W77V-XPXR-C6PV
MGASA-2015-0110

Produtos afetados

Moodle