Not rated
CVE-2017-2576 In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums
Description
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle 2.x and 3.x | Versions not published |
References
- 95649 www.securityfocus.com
- moodle.org moodle.org
Timeline
- Published
- Last modified
Other CVEs of Moodle 2.x and 3.x
The 9 CVEs of Moodle 2.x and 3.x →
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link
Not rated
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing
Not rated
CVE-2017-7491
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the…
Not rated
CVE-2017-2641
In Moodle 2.x and 3.x, SQL injection can occur via user preferences
Not rated