REDHAT-BUG-605809: Medium severity Moodle moodle vulnerability
Moodle upstream has released v1.9.9 and v1.8.13:
http://docs.moodle.org/en/Moodle1.9.9releasenotes http://docs.moodle.org/en/Moodle1.8.13releasenotes
Which address the following issues:
MSA-10-0010 Persistent Cross Site Scripting vulnerability in the MNET access control interface MSA-10-0011 Cross Site Scripting vulnerability in blog/index.php MSA-10-0012 KSES Security Filter Bypassing vulnerability MSA-10-0013 Potential Cross Site Scripting vulnerability in Quiz reports
These would affect Fedora (currently 1.9.8) and EPEL (currently 1.8.12).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Moodle on Fedorato a version that resolves this vulnerability.Fixed in 1.9.9 - Upgrade
Upgrade
Moodle on EPELto a version that resolves this vulnerability.Fixed in 1.8.13
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-605809?
The severity of REDHAT-BUG-605809 relates to vulnerabilities in Moodle versions prior to 1.9.9 and 1.8.13 that can lead to security issues.
How do I fix REDHAT-BUG-605809?
To fix REDHAT-BUG-605809, update Moodle to version 1.9.9 or 1.8.13.
Which versions are affected by REDHAT-BUG-605809?
REDHAT-BUG-605809 affects Moodle versions earlier than 1.9.9 and 1.8.13.
What functionalities are impacted by REDHAT-BUG-605809?
REDHAT-BUG-605809 may impact the security and integrity of user data within affected Moodle installations.
Is there a workaround for REDHAT-BUG-605809 before updating Moodle?
There is no documented workaround for REDHAT-BUG-605809; updating to the latest version is recommended.