Description

A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.

Remediation

References

CVE-2019-3851

Related Vulnerabilities

WordPress Plugin WP Private Messages SQL Injection (1.0.1)

OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3566)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13430)

Apache HTTP Server Other Vulnerability (CVE-2002-2103)

Joomla! Core 1.7.x Cross-Site Scripting (1.7.0 - 1.7.3)

Severity

Medium

Classification

CVE-2019-3851 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities