{"action":"Upgrade moodle/moodle to 3.5.5 or later.","affected":[{"fixed":"3.5.5","introduced":"3.5"},{"fixed":"3.6.3","introduced":"3.6"}],"component":"moodle/moodle","cve_ids":["CVE-2019-3851"],"ecosystem":"Packagist","epss":0.00883,"exploited":false,"fixed_versions":["3.5.5","3.6.3"],"ghsa_id":"GHSA-pj45-hp8h-289r","id":"tcs_01M5KF6E2YN35A6NWKM19NZPW5","modified_at":"2024-11-29T05:35:07.154027Z","published_at":"2022-05-13T01:22:27Z","references":["https://osv.dev/vulnerability/GHSA-pj45-hp8h-289r","https://nvd.nist.gov/vuln/detail/CVE-2019-3851","https://github.com/moodle/moodle/commit/7f22b14efb3408645cede026ad11126f17e3f59a","https://github.com/moodle/moodle/commit/911f7488068a56b05b0ad87be8f9e132075ab0a6","https://github.com/moodle/moodle/commit/c430bed525c4c7e6e5a1c0f7222bc323cf9b6245","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3851","https://github.com/moodle/moodle","https://moodle.org/mod/forum/discuss.php?d=384014#p1547746"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-pj45-hp8h-289r","url":"https://osv.dev/vulnerability/GHSA-pj45-hp8h-289r"}],"summary":"Moodle Secure layout contained an insecure link in Boost theme"}