Alert GCSA-14015 - Vulnerabilita' in Moodle
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ****************************************************************** Alert ID : GCSA-14015 Data : 26 Maggio 2014 Titolo : Vulnerabilita' in Moodle ****************************************************************** :: Descrizione del problema Sono state riportate diverse vulnerabilita' nel sofrtare Moodle, che potrebbero essere sfruttate per provocare cross-site scripting e accedere a informazioni protette e/o sensibili. Per una descrizione completa delle vulnerabilita' si rimanda alla sezione 'Riferimenti'. :: Software interessato Moodle versioni precedenti alle 2.4.10, 2.5.6, 2.6.3, and 2.7 :: Impatto Accesso a informazioni protette e sensibili :: Soluzioni Aggiornare Moodle alle versioni 2.4.10, 2.5.6, 2.6.3, and 2.7 http://download.moodle.org/ :: Riferimenti Moodle https://moodle.org/mod/forum/discuss.php?d=260361 https://moodle.org/mod/forum/discuss.php?d=260362 https://moodle.org/mod/forum/discuss.php?d=260363 https://moodle.org/mod/forum/discuss.php?d=260364 https://moodle.org/mod/forum/discuss.php?d=260365 https://moodle.org/mod/forum/discuss.php?d=260366 SecurityTracker http://www.securitytracker.com/id/1030256 Mitre CVE http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0213 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0214 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0215 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0216 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0217 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0218 GARR CERT Newsletter subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAlODKJ4ACgkQwZxMk2USYEL14gCgjPIh6eo3rtm4+DJf5MR7Ry+I 85QAnA80TbBWyKyU94x+81fVsm76u0SF =DqzE -----END PGP SIGNATURE-----