Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Improper Input Validation Vulnerability - CVE-2019-3847 - Vulnerability Database
Moodle

Moodle Improper Input Validation Vulnerability - CVE-2019-3847

High
Reference: CVE-2019-3847
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-3847
Title: Moodle Improper Input Validation Vulnerability
Overview:

A vulnerability was found in moodle before versions 3.6.3 3.5.5 3.4.8 and 3.1.17. Users with the quotlogin as other usersquot capability (such as administrators/managers) can access other users39 Dashboards but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.