Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-svUpgrade moodle-afUpgrade moodle-trUpgrade moodle-soUpgrade moodle-idUpgrade moodle-de_duUpgrade moodle-beUpgrade moodle-nnUpgrade moodle-lvUpgrade moodle-elUpgrade moodle-skUpgrade moodleUpgrade moodle-daUpgrade moodle-arUpgrade moodle-glUpgrade moodle-sqUpgrade moodle-tlUpgrade moodle-ltUpgrade moodle-thUpgrade moodle-srUpgrade moodle-esUpgrade moodle-isUpgrade moodle-kaUpgrade moodle-msUpgrade moodle-bgUpgrade moodle-ptUpgrade moodle-huUpgrade moodle-faUpgrade moodle-gaUpgrade moodle-caUpgrade moodle-csUpgrade moodle-noUpgrade moodle-plUpgrade moodle-slUpgrade moodle-hiUpgrade moodle-zh_cnUpgrade moodle-etUpgrade moodle-kmUpgrade moodle-hrUpgrade moodle-frUpgrade moodle-roUpgrade moodle-bsUpgrade moodle-nlUpgrade moodle-fiUpgrade moodle-heUpgrade moodle-ruUpgrade moodle-ukUpgrade moodle-knUpgrade moodle-itUpgrade moodle-mi_tnUpgrade moodle-viUpgrade moodle-deUpgrade moodle-koUpgrade moodle-euUpgrade moodle-ja | Feb 17, 2015 | Apr 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub