PT-2022-8585 · Moodle+1 · Moodle+1

Cid Da Costa · Published 2020-01-14 · Updated 2024-03-06 · CVE-2020-1691

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Moodle version 3.8

Description The issue concerns stored cross-site scripting. In Moodle, messages required extra sanitizing before updating the conversation overview to prevent this risk.

Recommendations For Moodle version 3.8, ensure that messages are properly sanitized before updating the conversation overview to prevent stored cross-site scripting.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2020-1035

BIT-MOODLE-2020-1691

CVE-2020-1691

GHSA-CWHP-RQFR-8462

Affected Products

Alt Linux

Moodle

References · 10

• https://osv.dev/vulnerability/UBUNTU-CVE-2020-1691 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-1691 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1691 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1691 · Vendor Advisory
• https://moodle.org/mod/forum/discuss.php?d=395953 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2020-1691 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-1691 · Security Note
• https://osv.dev/vulnerability/GHSA-cwhp-rqfr-8462 · Vendor Advisory
• https://github.com/moodle/moodle/commit/4e809346537e230cbff8235bfee0e7e151e4e9f9 · Note
• https://t.me/cibsecurity/47650 · Telegram Post