Description
Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
moodle
Default version status: unaffected
4.2.0 to < 4.2.1affected4.1.0 to < 4.1.4affected4.0.0 to < 4.0.9affected3.11.0 to < 3.11.15affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2214369 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A72KX4WU6GK2CX4TKYFGFASPKOEOJFC/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5QAEAGJ44NVXLAJFJXKARKC45OGEDXT/ ↗
- https://moodle.org/mod/forum/discuss.php?d=447829 ↗