Description

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.

Remediation

References

CVE-2019-3850

Related Vulnerabilities

WordPress Plugin Leaflet Maps Marker Pro (Google Maps, OpenStreetMap, Bing Maps) Multiple Cross-Site Scripting Vulnerabilities (2.3)

Oracle HTTP Server Use After Free Vulnerability (CVE-2019-0211)

WordPress Plugin Page Generator Cross-Site Scripting (1.5.8)

MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2079)

WordPress Plugin Easy Image Gallery Cross-Site Scripting (1.1.1)

Severity

Medium

Classification

CVE-2019-3850 CWE-601 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities