Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-3847
4.8
MEDIUMCVSS v3
Published
March 27, 2019
CVSS v2
3.5 LOW
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform>= 3.5.0, < 3.5.5, >= 3.6.0, < 3.6.3, < 3.1.17, >= 3.4.0, < 3.4.8, >= 3.2.0, < 3.4.8NVD
moodle
NPMModel module for node for use with both mongodb and mysql.
NPMModel module for node for use with both mongodb and mysql.>= 3.5.0, < 3.5.5, >= 3.6.0, < 3.6.3, < 3.1.17, >= 3.4.0, < 3.4.8NVD
RubyGems