Miembros de
Boletines de Vulnerabilidades |
MSA-21-0004: Stored XSS possible via TeX notation filter |
|
| Software afectado | PHP |
|
by Michael Hawkins. If the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.Severity/Risk:SeriousVersions affected:3.10, 3.9 to 3.9.3, 3.8 to 3.8.6, 3.5 to 3.5.15 and earlier unsupported versionsVersions fixed:3.10.1, 3.9.4, 3.8.7 and 3.5.16Reported by:Ata HakcilWorkaround:Disable the TeX notation filter until the patch has been applied. (Note that this filter is disabled by default.)CVE identifier:CVE-2021-20186Changes More info: https://moodle.org/mod/forum/discuss.php?d=417170&parent=1680845 |
|
