2 lines
7.1 KiB
JSON
2 lines
7.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Moodle 2.x and 3.x","vendor":"n/a","versions":[{"status":"affected","version":"Moodle 2.x and 3.x"}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","matchCriteriaId":"45E88468-55DB-4101-9135-1B994EBA542A","versionEndIncluding":"2.7.17","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.11:*:*:*:*:*:*:*","matchCriteriaId":"B549AD98-4DC5-4BE8-B3E0-3EEF1833E6D7","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.8.12:*:*:*:*:*:*:*","matchCriteriaId":"9F030E8C-0C49-41DC-9D40-A704A563C156","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5654B446-F7A5-49D4-90D9-478C18220A32","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.6:*:*:*:*:*:*:*","matchCriteriaId":"4E7CA637-D1BF-437D-8AD9-A21AE97E8681","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.7:*:*:*:*:*:*:*","matchCriteriaId":"62F27D6B-01A9-43EA-B5FF-28BB90DA6935","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.8:*:*:*:*:*:*:*","matchCriteriaId":"2EFDDA05-8D65-4D3B-BFBC-672C760D0ABF","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"2521684D-F25D-495B-8D34-DB8748E063BA","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0C702CFE-417E-45E2-94DD-07A9DADDA89E","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6DBB2B-5DAF-452F-9336-F8AB5825F638","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E70D9F51-1353-4030-B164-1F9F7F7C0F0F","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0E9118B8-81E1-406C-9D58-5CAAE4F8EAA5","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5D1A9221-1536-4989-A2B0-CD5C348B035A","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0033EC68-98DB-42E6-A256-EFA05F6EC72E","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27EC92C0-87A6-4D86-B940-C907EC4153ED","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"798441F2-2FE1-4335-A87C-08067C411718","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2479F7AE-8DC6-45CE-99E5-5063FE854635","vulnerable":true},{"criteria":"cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"03AE2C05-6EC3-42FA-82BC-48177EC2BD72","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums."},{"lang":"es","value":"En Moodle 2.x y 3.x, hay una desinfección incorrecta de atributos en foros."}],"id":"CVE-2017-2576","lastModified":"2026-06-17T01:16:26.020","metrics":{"cvssMetricV2":[{"acInsufInfo":true,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.0"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-01-20T08:59:00.393","references":[{"source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/95649"},{"source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"],"url":"https://moodle.org/mod/forum/discuss.php?d=345912"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/95649"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://moodle.org/mod/forum/discuss.php?d=345912"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"nvd@nist.gov","type":"Primary"}]}
|