GHSA-f7qm-q26p-6rr2
Suggest an improvement- Source
- https://github.com/advisories/GHSA-f7qm-q26p-6rr2
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-f7qm-q26p-6rr2/GHSA-f7qm-q26p-6rr2.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-f7qm-q26p-6rr2
- Aliases
-
- CVE-2015-3274
- Published
- 2022-05-13T01:12:47Z
- Modified
- 2024-02-16T08:06:13.408143Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- Moodle cross-site scripting (XSS) vulnerability
- Details
-
Cross-site scripting (XSS) vulnerability in the usergetuserdetails function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an externalformat_text call in a web service.
- Database specific
{ "nvd_published_at": "2016-02-22T05:59:00Z", "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-26T01:18:29Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2015-3274
- https://github.com/moodle/moodle/commit/7b15a363201109354bbd6d51a7c70f50dac7b9d8
- https://github.com/moodle/moodle/commit/a809a8dccea222a31e0828d4f17889035e6d1a36
- https://github.com/moodle/moodle/commit/e96e66aa16dca5cbcdb1aef0f9499edf86f1404b
- https://github.com/moodle/moodle/commit/ffe5c784889b3f7b2ba11cf9db881d54904623b7
- https://github.com/moodle/moodle
- https://moodle.org/mod/forum/discuss.php?d=316664
- https://web.archive.org/web/20150924032214/http://www.securitytracker.com/id/1032877
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50130
- http://openwall.com/lists/oss-security/2015/07/13/2
Affected packages
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle