Petr Skoda

The issue concerns the logout option within MFA, which did not include the necessary token to prevent the risk of users being inadvertently logged out via CSRF.

The issue arises from the unsafe direct use of the `HTTP REFERER` variable in the `admin/tool/mfa/index.php` file. Specifically, the referrer URL used by Multi-Factor Authentication (MFA) required additional sanitizing rather than being used directly. This could potentially lead to security issues, although the exact nature and impact are not detailed in the provided information.

The issue is related to insufficient sanitizing of user-provided data on the groups page, which poses an XSS risk. This could allow a remote attacker to steal potentially confidential information, modify the appearance of web pages, or conduct phishing and disk loading attacks.

The issue arises from the database auto-linking filter's output requiring additional sanitizing to prevent a cross-site scripting (XSS) risk. This implies that without proper sanitization, an attacker could potentially inject malicious scripts into the content output by the filter, leading to XSS attacks. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

The issue arises when the algebra filter is enabled but not functional, typically due to missing necessary binaries from the server. This presents a cross-site scripting (XSS) risk.

The issue is related to a cross-site request forgery (CSRF) vulnerability in the auth/shibboleth/logout.php component of the Moodle learning management system. This vulnerability can be exploited by a remote attacker to disrupt the authentication procedure for arbitrary users by using specially crafted requests.

The issue is related to the mod/lti/ajax.php component in Moodle, which does not properly consider the moodle/course:manageactivities and mod/lti:addinstance capabilities before handling registered-tool list searches. This allows remote authenticated users to obtain sensitive information via requests to the LTI Ajax service. The vulnerability is associated with a lack of protection for internal data, which can be exploited by an attacker to gain access to protected information using specially crafted requests to the Ajax service.

The issue is related to the lack of protection for service data in the calendar/externallib.php component of the Moodle learning management system. This allows a remote authenticated user to obtain sensitive calendar event information via a specially crafted web services request.

The issue allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF-7 characters during interaction with AJAX scripts, due to the lack of charset information in HTTP headers.

The issue is related to the LTI module, which does not properly restrict parameters used in a return URL. This allows remote attackers to trigger the generation of arbitrary messages via a modified URL, specifically related to mod/lti/locallib.php and mod/lti/return.php.

A cross-site scripting (XSS) issue exists in the Feedback module of Moodle, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved by leveraging the mod/feedback:mapcourse capability to provide a `searchcourse` parameter in the `mod/feedback/mapcourse.php` file.

The issue allows remote attackers to hijack the authentication of arbitrary users for requests that set a tracking preference within certain files, including mod/forum/deprecatedlib.php, mod/forum/forum.js, mod/forum/index.php, or mod/forum/lib.php. This is due to multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module.

The issue allows remote authenticated users to remove wiki pages by leveraging delete access within a different subwiki, specifically affecting the mod/wiki/admin.php file.

The issue allows remote attackers to hijack the authentication of arbitrary users. This can be achieved through a cross-site request forgery (CSRF) attack, specifically targeting the LTI module. The attack can involve requests to "mod/lti/request tool.php" or "mod/lti/instructor edit tool type.php".

The issue allows remote authenticated users to upload files containing JavaScript, and consequently conduct cross-site scripting (XSS) attacks. This is possible because the webservice/upload.php file does not ensure that a file upload is for a private or draft area. The attacks can be conducted by specifying the profile-picture area.

The issue allows remote authenticated users to access a forum without proper group permission verification. This is due to a problem in the `mod/forum/externallib.php` file, specifically with the `forum get discussions` web service.

The issue concerns the LTI module in Moodle, where the `mod/lti/launch.php` file performs access control at the course level rather than at the activity level. This allows remote authenticated users to bypass the `mod/lti:view` capability requirement by viewing an activity instance.

The issue allows remote attackers to execute arbitrary SQL commands via a crafted selected attempt. This is due to a SQL injection vulnerability in the `hotpot delete selected attempts` function in `report.php` in the HotPot module.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a style expression in the `search` parameter of index.php.