What is GHSA-4hjf-6pxr-549h?

GHSA-4hjf-6pxr-549h is a security advisory published by GitHub Security Advisories with Low severity. Moodle Cross-site Scripting vulnerability

Which CVE IDs does GHSA-4hjf-6pxr-549h cover?

GHSA-4hjf-6pxr-549h covers the following CVE IDs: CVE-2024-43437. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4hjf-6pxr-549h?

GHSA-4hjf-6pxr-549h has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-4hjf-6pxr-549h?

GHSA-4hjf-6pxr-549h affects 4 products, including: composer/moodle/moodle:\u003e= 4.4.0, \u003c 4.4.2; composer/moodle/moodle:\u003e= 4.3.0, \u003c 4.3.6; composer/moodle/moodle:\u003e= 4.2.0, \u003c 4.2.9; composer/moodle/moodle:\u003c 4.1.12.

GHSA-4hjf-6pxr-549hLowCVSS 5.4

Moodle Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

November 11, 2024

Last Modified

November 12, 2024

🔗 CVE IDs covered (1)

CVE-2024-43437 →

📋 Description

A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.

🎯 Affected products4

composer/moodle/moodle:>= 4.4.0, < 4.4.2
composer/moodle/moodle:>= 4.3.0, < 4.3.6
composer/moodle/moodle:>= 4.2.0, < 4.2.9
composer/moodle/moodle:< 4.1.12

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-43437
https://bugzilla.redhat.com/show_bug.cgi?id=2304266
https://moodle.org/mod/forum/discuss.php?d=461207
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81394
https://github.com/advisories/GHSA-4hjf-6pxr-549h