CVE-2014-3544
1 advisory.
Packagist/moodle/moodle CVE-2014-3544: low
Moodle cross-site scripting (XSS) vulnerability
Action: Upgrade moodle/moodle to 2.4.11 or later.
composer require moodle/moodle:2.4.11composer require moodle/moodle:2.5.7composer require moodle/moodle:2.6.4composer require moodle/moodle:2.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.11 | - |
| 2.5.0 | 2.5.7 | - |
| 2.6.0 | 2.6.4 | - |
| 2.7.0 | 2.7.1 | - |
Fixed versions
| 2.4.11 | 2.5.7 | 2.6.4 | 2.7.1 |
Sources
- osv: GHSA-c9jp-244j-vh78
- https://nvd.nist.gov/vuln/detail/CVE-2014-3544
- https://github.com/moodle/moodle/commit/0207466e778baebff21c7b72bc688761f9c5b0d9
- https://github.com/moodle/moodle/commit/739d227c58886e9a1be1426ed66053f1d37ee9a9
- https://github.com/moodle/moodle/commit/ce5a785b0962c3c94c7a7b0d36176482d21db95d
- https://github.com/moodle/moodle/commit/f7b6562f20f6af4119c7775477cffbaa83229f74
- https://github.com/moodle/moodle
- https://moodle.org/mod/forum/discuss.php?d=264265
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45683
- http://openwall.com/lists/oss-security/2014/07/21/1
- http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss
- http://osvdb.org/show/osvdb/109337
- http://packetstormsecurity.com/files/127624/Moodle-2.7-Cross-Site-Scripting.html
- http://www.exploit-db.com/exploits/34169
- http://www.securityfocus.com/bid/68756
CVE-2014-3544 · published · modified · JSON