Non notée
CVE-2017-2576 In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums
Description
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Moodle 2.x and 3.x | Versions non publiées |
Références
- 95649 www.securityfocus.com
- moodle.org moodle.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Moodle 2.x and 3.x
Les 9 CVE de Moodle 2.x and 3.x →
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link
Non notée
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing
Non notée
CVE-2017-7491
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the…
Non notée
CVE-2017-2641
In Moodle 2.x and 3.x, SQL injection can occur via user preferences
Non notée