CVE-2020-25702

6.1

MEDIUMCVSS v3

Published

November 19, 2020

CVSS v2

4.3 MEDIUM

Affected

10 projects

Assigned by

Red Hat

Severity scale

010

Description

In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.

moodle/moodle

GitHubMoodle - the world's open source learning platform

>= 3.9, < 3.9.3, >= 3.9.0, < 3.9.3NVD

moodle

NPMModel module for node for use with both mongodb and mysql.

>= 3.9, < 3.9.3NVD

moodle

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Moodle web services connection library

>= 3.9, < 3.9.3NVD

moodle

RubyGemsInteract with Moodle from ruby

>= 3.9, < 3.9.3NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

>= 3.9, < 3.9.3NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 32, = 33NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 32, = 33NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 32, = 33NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 32, = 33NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 32, = 33NVD

Security Advisories

CVE-2020-25702

Description

More on this CVE