Vulnerability Description
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A URL parameter in the filetype site administrator tool required extra sanitizing to prevent a reflected XSS risk.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moodle | Moodle | <= 3.8.8 |
| Fedoraproject | Extra Packages For Enterprise Linux | 7.0 |
| Fedoraproject | Fedora | 35 |
Related Weaknesses (CWE)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2021515Issue TrackingThird Party Advisory
- https://moodle.org/mod/forum/discuss.php?d=429097PatchVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2021515Issue TrackingThird Party Advisory
- https://moodle.org/mod/forum/discuss.php?d=429097PatchVendor Advisory
FAQ
What is CVE-2021-43558?
CVE-2021-43558 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A URL parameter in the filetype site administrator tool required extra sanitizing...
How severe is CVE-2021-43558?
CVE-2021-43558 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-43558?
Check the references section above for vendor advisories and patch information. Affected products include: Moodle Moodle, Fedoraproject Extra Packages For Enterprise Linux, Fedoraproject Fedora.