Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-34006

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

VectorNETWORK

PublishedMay 31, 2024, 21:15

Published Bypatrick@puiterwijk.org

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)4.3.04.3.4N/A

moodle/moodle(Packagist)4.2.04.2.7N/A

moodle/moodle(Packagist)04.1.10N/A

References

https://moodle.org/mod/forum/discuss.php?d=458395

Weakness Type

CWE-838

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK