Moodle cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-7341US | medium4.3 | — | ||
Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://flash.flowplayer.org/documentation/version-history.htmlWEB
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43344WEB
- http://openwall.com/lists/oss-security/2014/03/17/1WEB
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2013-7341.yamlWEB
- https://github.com/flowplayer/flash/issues/121WEB
- https://github.com/moodle/moodlePACKAGE
- https://github.com/moodle/moodle/commit/98d135fea3006334093efa822205d4b2c3fd8ff9WEB
- https://github.com/moodle/moodle/commit/9f2967e301d123d11625f3b6948e1ee538086791WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan