CVE-2024-29374
Description
From CVE.org
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
Statement
This vulnerability doesn't affect any supported Red Hat product.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability
Technical Impact: Read Application Data; Execute Unauthorized Code or Commands
An attacker could insert special characters that are processed client-side in the context of the user's session.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
