PT-2020-16137 · Softwarex+1 · Softwarex+1

Luuk Verhoeven · Published 2020-10-15 · Updated 2024-03-06 · CVE-2020-25628

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SoftwareX versions 3.5 through 3.5.13 SoftwareX versions 3.7 through 3.7.7 SoftwareX versions 3.8 through 3.8.4 SoftwareX versions 3.9 through 3.9.1

Description The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk.

Recommendations For versions 3.5 through 3.5.13, update to version 3.5.14. For versions 3.7 through 3.7.7, update to version 3.7.8. For versions 3.8 through 3.8.4, update to version 3.8.5. For versions 3.9 through 3.9.1, update to version 3.9.2.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2020-3059

ALT-PU-2020-3289

ALT-PU-2022-1641

BIT-MOODLE-2020-25628

CVE-2020-25628

GHSA-5X33-H32W-6VR2

Affected Products

Alt Linux

Softwarex

References · 11

• https://osv.dev/vulnerability/BIT-moodle-2020-25628 · Vendor Advisory
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69340 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-25628 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=410840 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-25628 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25628 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25628 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25628 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5x33-h32w-6vr2 · Vendor Advisory
• https://github.com/moodle/moodle/commit/e8632a4ad0b4da3763cbbe5949594aa449b483bb · Note
• https://t.me/cibsecurity/17231 · Telegram Post