To address a cache poisoning risk in Moodle, additional validation for local storage was required.
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Moodle | Moodle | * | 4.1.12 (excluding) |
Moodle | Moodle | 4.2.0 (including) | 4.2.9 (excluding) |
Moodle | Moodle | 4.3.0 (including) | 4.3.6 (excluding) |
Moodle | Moodle | 4.4.0 (including) | 4.4.2 (excluding) |