Miembros de
Boletines de Vulnerabilidades |
MSA-25-0030: Password can be revealed in login page after log out due to caching |
|
| Software afectado | PHP |
|
por Michael Hawkins. Additional cache controls were required to prevent web browsers caching a users password on the login page (note accessing this would require access to the web browser on the device where the user had logged in).Severity/Risk:MinorVersions affected:5.0, 4.5 to 4.5.4, 4.4 to 4.4.8, 4.1 to 4.1.18 and earlier unsupported versionsVersions fixed:5.0.1, 4.5.5, 4.4.9 and 4.1.19Reported by:Mark JohnsonCVE identifier:CVE-2025-49513Changes More info: https://moodle.org/mod/forum/discuss.php?d=468501&parent=1880831 |
|
