CVE-2023-35131

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-35131
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-35131.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-35131
Aliases
Downstream
Published
2023-06-22T21:15:09.413Z
Modified
2026-02-05T08:57:58.752515Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.

References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Type
GIT
Repo
https://github.com/moodle/moodle
Events
Introduced
8b359ad7a63cf219110bca80552fe3d4ea2a635d
Fixed
19c271d45ee1ab62df60295df54020a09b493b41
Introduced
0ea3d45e04c3d54a3a472ddcb11606b30e227c50
Fixed
76fe404dd5fca357152e9f71ae4800f557343486
Introduced
94f2d3fc4b974c5c7d500988c56b7ca15f58d7ec
Fixed
bfbae65caac00b3d4cfcdc3c8b8a18f66f3121f5

Affected versions

v3.*
v3.11.0
v3.11.1
v3.11.10
v3.11.11
v3.11.12
v3.11.13
v3.11.14
v3.11.2
v3.11.3
v3.11.4
v3.11.5
v3.11.6
v3.11.7
v3.11.8
v3.11.9
v4.*
v4.0.0
v4.0.1
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.0.6
v4.0.7
v4.0.8
v4.1.0
v4.1.0-beta
v4.1.0-rc1
v4.1.0-rc2
v4.1.0-rc3
v4.1.1
v4.1.2
v4.1.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-35131.json"