GHSA-3xh5-5v5v-mfgm

ghsaUSosv

Moodle reflected Cross-site Scripting (XSS)

view advisory published 2022-05-24Licence: CC-BY-4.0

A vulnerability was found in Moodle 3.7 before 3.7.3, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-14884US	medium6.1	0.93% (61st)	—	2020-03-18
A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages.

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14884WEB
https://github.com/moodle/moodlePACKAGE
https://moodle.org/mod/forum/discuss.php?d=393587#p1586751WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-14884ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan