漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper tags that were included in template contexts were not being escaped before that context was injected into another Mustache helper, which could result in script injection in some templates. This affects versions 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions.
漏洞信息
N/A
漏洞
对生成代码的控制不恰当(代码注入)
漏洞
Moodle 代码注入漏洞
漏洞信息
Moodle是一套免费、开源的电子学习软件平台,也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle中存在安全漏洞。攻击者可利用该漏洞注入脚本。以下产品及版本受到影响:Moodle 3.7版本至3.7.1版本,3.6版本至3.6.5版本,3.5版本至3.5.7版本,不再支持的旧版本。
漏洞信息
N/A
漏洞
N/A