2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2016-2152" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2016-05-22T20:59:01.097" ,
2025-04-12 12:06:01 +00:00
"lastModified" : "2025-04-12T10:46:40.837" ,
"vulnStatus" : "Deferred" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an external DB profile field."
} ,
{
"lang" : "es" ,
"value" : "M\u00faltiples vulnerabilidades de XSS en auth/db/auth.php en Moodle hasta la versi\u00f3n 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s de un campo externo DB profile."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" ,
2024-11-23 05:11:48 +00:00
"baseScore" : 6.1 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-11-23 05:11:48 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 2.7
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N" ,
2024-11-23 05:11:48 +00:00
"baseScore" : 4.3 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-11-23 05:11:48 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-79"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.6.11" ,
"matchCriteriaId" : "9F3E36CA-026A-4262-8CB7-73E0FC315A45"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4E051AAC-EB40-491F-AF0E-EE8143C12567"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FADBE87F-1855-453B-B958-0CB8A7908A06"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1B53A7D2-BDA2-4185-97C3-977A04876A37"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A51DFFA8-DFF0-429C-B697-F82F41621FEE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "19FD1565-0DA1-4BA8-A501-86F13D3D29ED"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FEB754AF-3DA4-4459-A53B-3BC7B78CE313"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F57E8383-C3F3-480C-B9A9-49633DAAEC18"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "645E8B7B-1AE6-4F46-AFA9-7506685CD571"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0316A26A-8B51-4226-8D56-4A798A2D798D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DD39692F-BC98-4AE3-B31A-4592D3212F4E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "12737AF4-B2D5-4661-B06A-6A06FE95EC2D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "88C59A94-D225-478A-B23E-41C4324BC643"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D88385B1-EEFB-4825-BD8F-215C39FD86DA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A3BE2782-D167-4237-B57D-2E4C04571524"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F277F979-12FA-47A5-B0A5-D174C2127A7D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "38498617-8E45-4E73-AE9F-C7A0D18FDE47"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C9047769-BFF4-42DB-8B19-F6D16FA910A1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "73A75ACE-FED2-4830-B259-744ABF25463E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F04EBA18-DFFF-4529-B647-98191325663B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A3A746AB-5D58-4196-962A-D22454C3550B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C9224D94-1C48-468C-A39B-B2694ED178F4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1C7EE9AD-E122-4288-9416-6D8F8790D75D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C4FC2CC1-787B-480F-BC41-538CE2507CB7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "098BADF2-C1D3-406E-9E79-E25483178C99"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "611B027A-38D6-445E-BFA9-FA68524147DB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8C22EB95-6D8F-45F8-A000-795E259CF06D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2016/03/21/1" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securitytracker.com/id/1035333" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://moodle.org/mod/forum/discuss.php?d=330174" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
2024-11-23 05:11:48 +00:00
} ,
{
"url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2016/03/21/1" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.securitytracker.com/id/1035333" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://moodle.org/mod/forum/discuss.php?d=330174" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}
