BIT-moodle-2021-36403

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/moodle/BIT-moodle-2021-36403.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-moodle-2021-36403
Aliases
Published
2024-03-06T11:08:18.160Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

References

Affected packages

Bitnami / moodle

Package

Name
moodle
Purl
pkg:bitnami/moodle

Severity

  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.9.8
Introduced
3.10.0
Fixed
3.10.5
Introduced
3.11.0
Fixed
3.11.1