CVE-2015-2273 in Moodle

Сводка

по MITRE

Cross-site scripting (XSS) vulnerability in mod/quiz/report/statistics/statistics_question_table.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the student role for a crafted quiz response.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Резервировать: 09.03.2015
• Раскрытие: 01.06.2015
• Модерация: принято
• Вход: VDB-75651
• CPE: готов
• CWE: CWE-79 (Подтверждённый)
• CVSS: 3.5 (NVD)
• EPSS: 0.01459
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Police, Education

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-2273
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-2273
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-2273/