Vulnerability Bulletins

MSA-22-0009: Upgrade CKEditor included in h5p-editor-php-library to latest version (upstream)


System information

   
Affected software PHP

Description

di Michael Hawkins. The CKEditor included in the h5p-editor-php-library within Moodle has been upgraded to the latest version, which includes security fixes.Severity/Risk:MinorVersions affected:3.11 to 3.11.5, 3.10 to 3.10.9, 3.9 to 3.9.12 and earlier unsupported versionsVersions fixed:3.11.6, 3.10.10 and 3.9.13Reported by:Sara Arjona (@sarjona)CVE identifier:N/AChanges (master):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-71722Tracker issue:MDL-71722

More info:

https://moodle.org/mod/forum/discuss.php?d=432951&parent=1742078

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2022-05-17
Ministerio de Defensa
CNI
CCN
CCN-CERT