Skip to content
Sign in
Not rated

CVE-2018-1136 An issue was discovered in Moodle 3.x

Description

An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerability, users can move such a block to other pages where they can be viewed by other users.

Affected products and versions

Product Affected versions Fixed in
Moodle 3.x unknown Versions not published

Other CVEs of Moodle 3.x unknown

The 5 CVEs of Moodle 3.x unknown →
CVE-2018-1137 An issue was discovered in Moodle 3.x Not rated CVE-2018-1133 An issue was discovered in Moodle 3.x Not rated CVE-2018-1134 An issue was discovered in Moodle 3.x Not rated CVE-2018-1135 An issue was discovered in Moodle 3.x Not rated
Track this CVE