{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eMoodle\u003c/SPAN\u003e versions 1.9.9 et  ant\u00e9rieures.\u003c/P\u003e",
  "content": "## Description\n\nLe logiciel Moodle int\u00e8gre plusieurs biblioth\u00e8ques de composants tiers,\nnotamment YUI, phpCAS, HTML Purifier et phpMyAdmin. De multiples\nvuln\u00e9rabilit\u00e9s, d\u00e9couvertes dans ces diff\u00e9rents \u00e9l\u00e9ments, permettent\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance, la r\u00e9alisation d\u0027injections\nde code indirectes et le contournement de la politique de s\u00e9curit\u00e9.\n\n## Solution\n\nMettre Moodle \u00e0 jour en version 1.9.10.\n",
  "cves": [],
  "initial_release_date": "2010-10-28T00:00:00",
  "last_revision_date": "2010-10-28T00:00:00",
  "links": [
    {
      "title": "T\u00e9l\u00e9chargement de Moodle :",
      "url": "http://download.moodle.org/"
    }
  ],
  "reference": "CERTA-2010-AVI-515",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-10-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eMoodle\u003c/span\u003e\npermettent l\u0027ex\u00e9cution de code arbitraire \u00e0 distance, la r\u00e9alisation\nd\u0027injections de code indirectes et le contournement de la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Moodle",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Notes de la version 1.9.10 de Moodle du 25 octobre 2010",
      "url": "http://docs.moodle.org/en/Moodle_1.9.10_release_notes"
    }
  ]
}