PT-2017-15445 · Moodle · Moodle

Anshul Jain · Published 2017-01-20 · Updated 2022-05-13 · CVE-2017-2576

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x

Description The issue is related to incorrect sanitization of attributes in forums, which can lead to potential security risks.

Recommendations For Moodle versions 2.x through 3.x, update to a version that includes the fix for the incorrect sanitization of attributes in forums.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-2576

GHSA-CJRF-XG77-CHPW

Affected Products

Moodle

References · 9

• https://moodle.org/mod/forum/discuss.php?d=345912 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2576 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-2576 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cjrf-xg77-chpw · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-2576 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-2576 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2576 · Security Note
• https://github.com/moodle/moodle · Note
• http://securityfocus.com/bid/95649 · Note