Moodle does not set the RISK_XSS bit for graders

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2015-3174 · ADVISORY
• moodle/moodle commit 10c2b92 · WEB
• moodle/moodle commit 1ce4f44 · WEB
• moodle/moodle commit 39ae18a · WEB
• moodle/moodle commit e51fdfe · WEB
• moodle/moodle · PACKAGE
• moodle.org/mod/forum/discuss.php · WEB
• web.archive.org/web/20201030042703/http://www.securitytracker.com/id/1032358 · WEB
• git.moodle.org/gw · WEB
• openwall.com/lists/oss-security/2015/05/18/1 · WEB
• securityfocus.com/bid/74719https://web.archive.org/web/20200228054910/http://www.securityfocus.com/bid/74719

Lỗ hổng khác của moodle/moodle

• CVE-2026-26047TRUNG BÌNH 6.5A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient exec…
• CVE-2026-26045CAO 7.2A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during proce…
• CVE-2025-67857TRUNG BÌNH 5.3A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure…
• CVE-2025-67856NGHIÊM TRỌNG 9.8A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allow…
• CVE-2025-67855TRUNG BÌNH 6.1A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return …