CVE-2019-14881: XSS
First published: Wed Mar 18 2020(Updated: )
A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle Moodle | >=3.7.0<3.7.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2019-14881
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14881
- https://moodle.org/mod/forum/discuss.php?d=393584#p1586746
- https://github.com/moodle/moodle/commit/7455b741c954af3c3e7dfda2972edc1146ea1562
- https://github.com/advisories/GHSA-9jf6-wq34-fg9w (Advisory)
Frequently Asked Questions
What is CVE-2019-14881?
CVE-2019-14881 is a vulnerability found in Moodle 3.7 before version 3.7.3, which allows for blind cross-site scripting (XSS) attacks.
How does CVE-2019-14881 affect Moodle?
CVE-2019-14881 affects Moodle versions 3.7 to 3.7.2 and versions before 3.7.3, where blind XSS can be reflected in some locations where user email is displayed.
What is the severity of CVE-2019-14881?
CVE-2019-14881 has a severity rating of 6.1 (medium).
How can I fix CVE-2019-14881 vulnerability?
To fix CVE-2019-14881 vulnerability, you should update your Moodle installation to version 3.7.3 or later.
Where can I find more information about CVE-2019-14881?
You can find more information about CVE-2019-14881 on the NIST National Vulnerability Database page, Red Hat Bugzilla, and the Moodle forums.
- collector/github-advisory-latest
- alias/GHSA-9jf6-wq34-fg9w
- alias/CVE-2019-14881
- collector/github-advisory
- collector/nvd-index
- collector/nvd-cve
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- agent/trending
- package-manager/composer
- vendor/moodle
- canonical/moodle moodle
- version/moodle moodle/3.7.0