MSA-12-0048: Possible XSS in cohort administration

MSA-12-0048: Possible XSS in cohort administration

by Michael de Raadt -
Number of replies: 0
Topic: Possible XSS vuln caused by MDL-31691 commit
Severity/Risk: Minor
Versions affected: 2.3, 2.2 to 2.2.3+, 2.1 to 2.1.6+, 2.0 to 2.0.9+
Reported by: Eugene
Issue no.: MDL-34045

CVE Identifier:

CVE-2012-3396
Changes (master): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34045

Description:

Fields used in the administration of cohorts were not being correctly filtered.