CVE-2020-14320
CVE-2020-14320
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.
CVSS 6.1 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Affected products and versions
moodle
- Versions
- Moodle 3.9, 3.8 to 3.8.3 and 3.7 to 3.7.6: Affected
No fix published
moodle/moodle Packagist
- Versions
- 3.9
- v3.9.0
- v3.9.0-beta
- v3.9.0-rc1
- v3.9.0-rc2
- v3.9.0-rc3
- Affected ranges
- ECOSYSTEM: ≥ 3.9, < 3.9.1
Update to 3.9.1
moodle/moodle Packagist
- Versions
- v3.8.0
- v3.8.0-beta
- v3.8.0-rc1
- v3.8.1
- v3.8.2
- v3.8.3
- Affected ranges
- ECOSYSTEM: ≥ 3.8, < 3.8.4
Update to 3.8.4
moodle/moodle Packagist
- Versions
- v3.7.0
- v3.7.0-beta
- v3.7.0-rc1
- v3.7.0-rc2
- v3.7.1
- v3.7.2
- v3.7.3
- v3.7.4
- v3.7.5
- v3.7.6
- Affected ranges
- ECOSYSTEM: ≥ 3.7, < 3.7.7
Update to 3.7.7
moodle Ubuntu:Pro:16.04:LTS
- Versions
- 2.7.9+dfsg-1
- 2.7.10+dfsg-1
- 2.7.11+dfsg-1
- 2.7.11+dfsg-2
- 2.7.12+dfsg-1
- 3.0.3+dfsg-0ubuntu1
- 3.0.3+dfsg-0ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
moodle Ubuntu:Pro:18.04:LTS
- Versions
- 3.0.3+dfsg-0ubuntu1
- 3.0.3+dfsg-0ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published