ghsa

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.

The course upload preview contained an XSS risk for users uploading unsafe data.

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

Students in "Only see own membership" groups could see other students in the group, which should be hidden.

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.

### Summary An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation. ### Details The rogue session attack targets any SSH client connecting to an AsyncSSH server, on which the attacker must have a shell account. The goal of the attack is to log the client into the attacker's account without the client being able to detect this. At that point, due to how SSH sessions interact with shell environments, the attacker has complete control over the remote end of the SSH session. The attacker receives all keyboard input by the user, completely controls the terminal output of the user's session, can send and receive data to/from forwarded network ports, and is able to create signatures with a forwarded SSH Agent, if any. The result is a complete break of the confidentiality and integrity of the secure channel, providing a strong vector for a targeted phishing campaign against the user. For e...

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.