CVE-2010-2230 (GCVE-0-2010-2230)

Vulnerability from cvelistv5 – Published: 2010-06-28 17:00 – Updated: 2024-08-07 02:25
VLAI
Summary
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
redhat CNA under the redhat root
CNA scorecard B 82/100 over 1045 records in the last 180 days details
References
Date Public
2010-06-17 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:25:07.388Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tracker.moodle.org/browse/MDL-22042"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171\u0026r2=1.970.2.172"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.moodle.org/en/Moodle_1.8.13_release_notes"
          },
          {
            "name": "FEDORA-2010-10286",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html"
          },
          {
            "name": "ADV-2010-1571",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1571"
          },
          {
            "name": "[oss-security] 20100621 Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2010/06/21/2"
          },
          {
            "name": "40352",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40352"
          },
          {
            "name": "ADV-2010-1530",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1530"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://moodle.org/mod/forum/discuss.php?d=152368"
          },
          {
            "name": "FEDORA-2010-10321",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.moodle.org/en/Moodle_1.9.9_release_notes"
          },
          {
            "name": "40248",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40248"
          },
          {
            "name": "FEDORA-2010-10291",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114\u0026r2=1.812.2.115"
          },
          {
            "name": "SUSE-SR:2010:014",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=605809"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-09-09T09:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tracker.moodle.org/browse/MDL-22042"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171\u0026r2=1.970.2.172"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.moodle.org/en/Moodle_1.8.13_release_notes"
        },
        {
          "name": "FEDORA-2010-10286",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html"
        },
        {
          "name": "ADV-2010-1571",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1571"
        },
        {
          "name": "[oss-security] 20100621 Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2010/06/21/2"
        },
        {
          "name": "40352",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40352"
        },
        {
          "name": "ADV-2010-1530",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1530"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://moodle.org/mod/forum/discuss.php?d=152368"
        },
        {
          "name": "FEDORA-2010-10321",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.moodle.org/en/Moodle_1.9.9_release_notes"
        },
        {
          "name": "40248",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40248"
        },
        {
          "name": "FEDORA-2010-10291",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114\u0026r2=1.812.2.115"
        },
        {
          "name": "SUSE-SR:2010:014",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=605809"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-2230",
    "datePublished": "2010-06-28T17:00:00.000Z",
    "dateReserved": "2010-06-09T00:00:00.000Z",
    "dateUpdated": "2024-08-07T02:25:07.388Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2010-2230",
      "date": "2026-10-22",
      "epss": "0.02226",
      "percentile": "0.82587"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "52898D7B-7923-4900-921C-722F4AA97A2B",
                    "versionEndIncluding": "1.8.12",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "044E2E34-470C-45C9-8136-22493077D842",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F5FB2555-7146-4A75-9D24-250BBC09244A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "949F0BC0-A79E-4B1D-894D-650CF68109F9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "616AE17F-F5B4-4D64-B287-0AAB189C802A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "74246580-F351-4EAE-9406-2386CFF1819D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "077FFAAB-BACD-43F4-B146-DBFFD58CE619",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9C715839-F020-4F42-94F0-9FA34F294578",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3113CF64-DFDD-413F-BB85-5A8B251608D3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "99CFB2E0-B99B-4154-8A6E-B6A8483ACEBB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CE4F8CC3-5428-4F72-B4DC-299A50EE9C88",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.4.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "28252347-44DD-4302-8170-21DDB0A3B3A7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.4.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "740F27D0-4E66-4E2C-A2AB-54F5211F796F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.4.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FA227895-91FF-4689-A03A-D712EAB5E369",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C42DBF05-906B-47E6-BC75-50EBA38B72BD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.5.0:beta:*:*:*:*:*:*",
                    "matchCriteriaId": "D6A58D43-9AB1-4EEA-8E5D-7829AFAE11D7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B6C3409E-47BF-4D01-ADAC-58475E5D3077",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2E38AF73-EA00-485F-A63B-7C05AD9C948E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.5.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66BD9A00-DA61-4389-8731-B92585C2BE6C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "680CE396-5F61-409C-A152-4D1E1CB44EA3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "98CA6482-0B84-463D-9C81-A92FFC06C9FA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0794B997-0793-4465-B9BA-5BFF254D600A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DCFEA024-4CA7-4975-802C-1BB9C099C164",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D1E5E19D-BC58-478E-A584-6D260A5C5265",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CD6C092A-2871-475E-AE53-DC02EB9C3FBD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FB16198E-A32D-4CFA-9CCE-65871596E6AC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "56551145-5213-4165-88C9-C351DACDD1C6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A589727E-92BB-40DA-8172-89279EB9B73C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "92E97539-A7CC-48D3-A897-ADE4BC194B2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D19C1954-6330-449D-9101-378D5DBD122C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A4A3A5D9-D96E-46B3-AC22-25045564EB96",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AF91F8EA-1737-4E11-9931-ACAFB4BC0018",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1E81E148-5710-439C-8A1A-884D27640AAD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A3B70465-F734-4C65-9790-0D83D03B7A16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7949FC50-81B9-44AD-BB1B-91D025B34FF6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2C61F076-71AC-4AEF-BECF-9EF0B05CEB77",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.8.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "18A3C2C4-A1FE-422C-81DB-9E46035106FD",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "24F2602B-8ED3-4026-A9A4-31BE8BDC7724",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D7F24649-B67F-4809-9F54-7B623AEF5A4A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "291F73E9-1059-4E7F-860F-0DF2A35AA456",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0EB5859E-0996-46B5-BB44-34BD6EACBCF5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F87F6707-99AB-478A-909D-1D87298D5514",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input."
          },
          {
            "lang": "es",
            "value": "El filtro de limpieza de KSES en lib/weblib.php en Moodle anteriores a v1.8.13 y v1.9.x anteriores a v1.9.9 no gestiona de forma adecuada direcciones URI vbscript, lo que permite a usuarios autenticados remotos conducir un ataque ejecuci\u00f3n de secuencias de comandos (XSS) trav\u00e9s de una entrada HTML."
          }
        ],
        "id": "CVE-2010-2230",
        "lastModified": "2026-04-29T01:13:23.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "NONE",
                "baseScore": 4.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2010-06-28T17:30:01.247",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114\u0026r2=1.812.2.115"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171\u0026r2=1.970.2.172"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://docs.moodle.org/en/Moodle_1.8.13_release_notes"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://docs.moodle.org/en/Moodle_1.9.9_release_notes"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://moodle.org/mod/forum/discuss.php?d=152368"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/40248"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/40352"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://tracker.moodle.org/browse/MDL-22042"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.openwall.com/lists/oss-security/2010/06/21/2"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1530"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1571"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=605809"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114\u0026r2=1.812.2.115"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171\u0026r2=1.970.2.172"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://docs.moodle.org/en/Moodle_1.8.13_release_notes"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://docs.moodle.org/en/Moodle_1.9.9_release_notes"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://moodle.org/mod/forum/discuss.php?d=152368"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/40248"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/40352"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://tracker.moodle.org/browse/MDL-22042"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.openwall.com/lists/oss-security/2010/06/21/2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1530"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1571"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=605809"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-79"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.