PT-2023-32168 · Moodle+8 · Moodle+6

Paul Holden · Publicado 2023-11-09 · Atualizado 2024-03-06 · CVE-2023-5546

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The issue concerns a stored XSS risk in the quiz grading report, where ID numbers were not properly sanitized. This could potentially allow for malicious script execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BIT-MOODLE-2023-5546

CVE-2023-5546

GHSA-9724-H8P7-R3JV

Produtos afetados

Moodle

Ckeditor4

Enterprise Linux

Fedora

Moodle/Moodle

Upx

Wireshark

Referências · 13

• https://github.com/moodle/moodle · Nota
• https://github.com/moodle/moodle/commit/aa8ab48521fe4a57c3ec923e6e82a5ac1202e9de · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-5546 · Nota de Segurança
• https://moodle.org/mod/forum/discuss.php?d=451587 · Correção
• https://bugzilla.redhat.com/show_bug.cgi?id=2243445 · Nota
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78971 · Correção
• https://osv.dev/vulnerability/GHSA-9724-h8p7-r3jv · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-5546 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-5546 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-5546 · Aviso do Fabricante
• https://osv.dev/vulnerability/BIT-moodle-2023-5546 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1722703741323792493 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-5546 · Aviso do Fabricante