Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-43439

Fixed upstream EPSS <1%CVSS 5.4

A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk.

Published 2024-11-11 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.1.12
Packagistmoodle/moodle4.2.9
Packagistmoodle/moodle4.3.6
Packagistmoodle/moodle4.4.2

Distro releases

ReleasePackageFixed in
Ubuntu:Pro:16.04:LTSmoodleno fix
Ubuntu:Pro:18.04:LTSmoodleno fix