CVE-2024-43437 | THREATINT

Description

A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.

Reserved 2024-08-13 | Published 2024-11-11 | Updated 2024-11-11 | Assigner fedora

MEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Product status

Default status

unaffected

Any version before 4.1.12

affected

4.2 before 4.2.9

affected

4.3 before 4.3.6

affected

4.4 before 4.4.2

affected

Timeline

2024-08-12:	Reported to Red Hat.
2024-08-19:	Made public.

References

bugzilla.redhat.com/show_bug.cgi?id=2304266 (RHBZ#2304266) issue-tracking

moodle.org/mod/forum/discuss.php?d=461207

cve.org (CVE-2024-43437)

nvd.nist.gov (CVE-2024-43437)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.