Description
A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | moodle | 3.6.3, 3.5.5 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | moodle/moodle | >= 3.5, < 3.5.5 | 3.5.5 | GHSA-pj45-hp8h-289r |
| Packagist | moodle/moodle | >= 3.6, < 3.6.3 | 3.6.3 | GHSA-pj45-hp8h-289r |