The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Jun 28, 2010 |
| Suse | — | Upgrade moodle-kmUpgrade moodle-thUpgrade moodle-kaUpgrade moodle-koUpgrade moodle-huUpgrade moodle-afUpgrade moodle-svUpgrade moodle-trUpgrade moodle-beUpgrade moodle-zh_cnUpgrade moodle-skUpgrade moodle-heUpgrade moodle-msUpgrade moodle-esUpgrade moodle-idUpgrade moodle-mi_tnUpgrade moodle-de_duUpgrade moodle-knUpgrade moodle-slUpgrade moodle-glUpgrade moodle-lvUpgrade moodle-gaUpgrade moodle-bgUpgrade moodle-elUpgrade moodle-isUpgrade moodle-hiUpgrade moodle-ltUpgrade moodle-daUpgrade moodle-faUpgrade moodle-caUpgrade moodle-soUpgrade moodle-ruUpgrade moodle-nnUpgrade moodle-euUpgrade moodle-plUpgrade moodle-roUpgrade moodle-nlUpgrade moodle-bsUpgrade moodle-deUpgrade moodle-viUpgrade moodleUpgrade moodle-srUpgrade moodle-fiUpgrade moodle-itUpgrade moodle-jaUpgrade moodle-noUpgrade moodle-frUpgrade moodle-csUpgrade moodle-hrUpgrade moodle-tlUpgrade moodle-ptUpgrade moodle-etUpgrade moodle-arUpgrade moodle-ukUpgrade moodle-sq | Feb 17, 2015 | Jun 28, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub