In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Moodle 3.x, XSS can occur via attachments to evidence of prior learning. (CVE-2017-2645)

The remote web server hosts Moodle, an open-source course management system. Versions of Moodle 3.2.x prior to 3.2.2 are affected by multiple vulnerabilities :

 - A flaw exists that is due to Global Searches failing to respect the Force login for profiles setting. This may allow an unauthenticated remote attacker to gain access to potentially sensitive username information.
 - A flaw exists that allows a cross-site scripting (XSS) attack. This flaw exists because the program does not validate input when handling evidence for prior learning before returning it to users. This may allow an authenticated remote attacker to create a specially crafted request that will execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - A flaw exists that allows a XSS attack. This flaw exists because the program does not validate input when handling files attached for evidence for prior learning before returning it to users. This may allow an authenticated remote attacker to create a specially crafted request that will execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - A flaw exists that may allow an attacker to have an unspecified impact. No further details have been provided.

The remote web server hosts Moodle, an open-source course management system. Versions of Moodle 3.1.x prior to 3.1.5 are affected by multiple unspecified flaws that may allow an attacker to have an unspecified impact. No further details have been provided.
 - A flaw exists that allows a Cross-Site Scripting (XSS) attack. This flaw exists because the program does not validate input when handling files attached for evidence for prior learning before returning it to users. This may allow an authenticated remote attacker to create a specially crafted request that will execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.

ID	Name	Product	Family	Severity
433539	SCA: security update for moodle/moodle (GHSA-9cg4-4f87-jhm3)	Tenable Cloud Security	SCA Checks	medium
433539	SCA: security update for moodle/moodle (GHSA-9cg4-4f87-jhm3)	Tenable Self-Hosted Container Security	SCA Checks	medium
700011	Moodle 3.2.x < 3.2.2 Multiple Vulnerabilities	Nessus Network Monitor	CGI	critical
700010	Moodle 3.1.x < 3.1.5 Multiple Vulnerabilities	Nessus Network Monitor	CGI	critical

Detections

Analytics

CVE-2017-2645

medium

Tenable Plugins

medium

medium

critical

critical