Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
2023-11-09T20:15:09.660
2024-11-21T08:41:58.747
Modified
CVSSv3.1: 6.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | moodle | moodle | < 3.9.24 | Yes |
| Application | moodle | moodle | < 3.11.17 | Yes |
| Application | moodle | moodle | < 4.0.11 | Yes |
| Application | moodle | moodle | < 4.1.6 | Yes |
| Application | moodle | moodle | < 4.2.3 | Yes |
| Operating System | redhat | enterprise_linux | 7.0 | Yes |
| Operating System | fedoraproject | fedora | 37 | Yes |
| Operating System | fedoraproject | fedora | 38 | Yes |
| Operating System | fedoraproject | fedora | 39 | Yes |