The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-slUpgrade moodle-euUpgrade moodle-frUpgrade moodle-csUpgrade moodle-hrUpgrade moodle-nlUpgrade moodle-koUpgrade moodle-zh_cnUpgrade moodle-viUpgrade moodle-hiUpgrade moodle-roUpgrade moodle-ruUpgrade moodle-knUpgrade moodle-etUpgrade moodle-plUpgrade moodle-heUpgrade moodle-itUpgrade moodle-ukUpgrade moodle-bsUpgrade moodle-noUpgrade moodle-fiUpgrade moodle-jaUpgrade moodle-deUpgrade moodle-mi_tnUpgrade moodle-kmUpgrade moodle-soUpgrade moodle-isUpgrade moodle-svUpgrade moodle-srUpgrade moodle-afUpgrade moodle-trUpgrade moodle-idUpgrade moodle-beUpgrade moodle-skUpgrade moodle-esUpgrade moodle-bgUpgrade moodle-nnUpgrade moodle-lvUpgrade moodle-ptUpgrade moodle-msUpgrade moodleUpgrade moodle-arUpgrade moodle-elUpgrade moodle-caUpgrade moodle-daUpgrade moodle-sqUpgrade moodle-kaUpgrade moodle-de_duUpgrade moodle-faUpgrade moodle-tlUpgrade moodle-gaUpgrade moodle-thUpgrade moodle-huUpgrade moodle-ltUpgrade moodle-gl | Feb 17, 2015 | Apr 29, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub