The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the Login-As feature or (2) when the global search feature is enabled, unspecified global search forms in the Global Search Engine. NOTE: vector 1 might be resultant from a cross-site request forgery (CSRF) vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-lvUpgrade moodle-jaUpgrade moodle-bgUpgrade moodle-arUpgrade moodle-thUpgrade moodle-csUpgrade moodle-tlUpgrade moodle-afUpgrade moodle-hrUpgrade moodle-beUpgrade moodle-etUpgrade moodleUpgrade moodle-esUpgrade moodle-skUpgrade moodle-kaUpgrade moodle-ptUpgrade moodle-fiUpgrade moodle-daUpgrade moodle-kmUpgrade moodle-ukUpgrade moodle-ruUpgrade moodle-frUpgrade moodle-plUpgrade moodle-srUpgrade moodle-idUpgrade moodle-gaUpgrade moodle-hiUpgrade moodle-de_duUpgrade moodle-caUpgrade moodle-svUpgrade moodle-itUpgrade moodle-zh_cnUpgrade moodle-heUpgrade moodle-slUpgrade moodle-ltUpgrade moodle-isUpgrade moodle-roUpgrade moodle-noUpgrade moodle-deUpgrade moodle-msUpgrade moodle-knUpgrade moodle-huUpgrade moodle-bsUpgrade moodle-trUpgrade moodle-elUpgrade moodle-nlUpgrade moodle-glUpgrade moodle-soUpgrade moodle-faUpgrade moodle-mi_tnUpgrade moodle-nnUpgrade moodle-euUpgrade moodle-sqUpgrade moodle-viUpgrade moodle-ko | Feb 17, 2015 | Apr 29, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub