Lucene search
Veracode Vulnerability DatabaseVERACODE:47700HistoryJun 24, 2024 - 4:47 a.m.
Cross-site Scripting (XSS)
2024-06-2404:47:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
moodle
cross-site scripting
xss
user input
field name parameter
new activity
improper validation
vulnerability
software
attacker
xss attacks
CVSS3
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
AI Score
5.8
Confidence
High
moodle/moodle is vulnerable to Cross-site Scripting (XSS). The vulnerability is caused due to improper validation of user input in the “Field Name” parameter associated with a new activity, which allows an attacker to perform XSS attacks.
Related
ubuntucve
ubuntucve
CVE-2024-37674
2024-06-20 00:00:00
vulnrichment
vulnrichment
CVE-2024-37674
2024-06-20 00:00:00
cve
cve
CVE-2024-37674
2024-06-20 18:15:12
nvd
nvd
CVE-2024-37674
2024-06-20 18:15:12
cvelist
cvelist
CVE-2024-37674
2024-06-20 00:00:00
openvas
openvas
Moodle <= 3.10 XSS Vulnerability
2024-07-11 00:00:00
osv
osv
CVE-2024-37674
2024-06-20 18:15:00
CVSS3
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
AI Score
5.8
Confidence
High
Related for VERACODE:47700