Beveiligingsadvies

CVE-2015-5337

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-02-22 02:00:00

Laatst bijgewerkt 2024-08-06 06:41:09

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted .swf file.

← Alle CVE's bekijken Bekijk op cve.org ↗