NVD

Id
83867  
Name
CVE-2017-7298  
Description
In Moodle 3.2.2+, there is XSS in the Course summary filter of the Add a new course page, as demonstrated by a crafted attribute of an SVG element.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2017-03-29  
Modified Date
2017-03-30  
Seq
2017-7298  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
411837 83867 CVE-2017-5849 http://bugzilla.maptools.org/show_bug.cgi?id=2654  View
411838 83867 CVE-2017-5849 http://bugzilla.maptools.org/show_bug.cgi?id=2655  View
411839 83867 CVE-2017-5849 [oss-security] 20170202 Re: CVE request: Out-of-Bound read and write issues in put1bitbwtile()(tiff-4.0.7/libtiff/tif-getimage.c:1352) and putgreytile()(tiff-4.0.7/libtiff/tif-getimage.c:1288)  View
411840 83867 CVE-2017-5849 96011  View
411841 83867 CVE-2017-5849 FEDORA-2017-fa4e441e03  View
411842 83867 CVE-2017-5849 FEDORA-2017-1855c8af2c  View
411843 83867 CVE-2017-5849 http://bugzilla.maptools.org/show_bug.cgi?id=2654  View
411844 83867 CVE-2017-5849 http://bugzilla.maptools.org/show_bug.cgi?id=2655  View
411845 83867 CVE-2017-5849 [oss-security] 20170202 Re: CVE request: Out-of-Bound read and write issues in put1bitbwtile()(tiff-4.0.7/libtiff/tif-getimage.c:1352) and putgreytile()(tiff-4.0.7/libtiff/tif-getimage.c:1288)  View
411846 83867 CVE-2017-5849 96011  View
411847 83867 CVE-2017-5849 FEDORA-2017-fa4e441e03  View
411848 83867 CVE-2017-5849 FEDORA-2017-1855c8af2c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66394 JVNDB-2017-002732 Moodle におけるクロスサイトスクリプティングの脆弱性 Moodle には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-7298 0 CVE-2017-7298 83867 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002732.html 2017-03-29 2017-04-26 View