CVE-2014-3547
1 advisory.
Packagist/moodle/moodle CVE-2014-3547: medium
Moodle multiple cross-site scripting (XSS) vulnerabilities
Action: Upgrade moodle/moodle to 2.5.7 or later.
composer require moodle/moodle:2.5.7composer require moodle/moodle:2.6.4composer require moodle/moodle:2.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5.0 | 2.5.7 | - |
| 2.6.0 | 2.6.4 | - |
| 2.7.0 | 2.7.1 | - |
Fixed versions
| 2.5.7 | 2.6.4 | 2.7.1 |
Sources
- osv: GHSA-hwjv-mc78-cccj
- https://nvd.nist.gov/vuln/detail/CVE-2014-3547
- https://github.com/moodle/moodle/commit/0174a0a57f6d84e240dd0bc0df0ffa63c3cc5a88
- https://github.com/moodle/moodle/commit/200a2b7fad3f7ef92b3171a07d68df6958d842b7
- https://github.com/moodle/moodle/commit/9eef6b5237520f0cb9874564e577c64e3a831987
- https://github.com/moodle/moodle/commit/ea76b652fc4f3600403a61e54f198cc8570a4234
- https://github.com/moodle/moodle
- https://moodle.org/mod/forum/discuss.php?d=264269
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46042
- http://openwall.com/lists/oss-security/2014/07/21/1
- http://www.securityfocus.com/bid/68758
CVE-2014-3547 · published · modified · JSON