Upgrade moodle/moodle to version 3.8.3, 3.7.6, 3.6.10, 3.5.12 or higher.

eap7-apache-commons-codec vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the eap7-apache-commons-codec package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS)	<0:1.11.0-2.redhat_00001.1.el8eap
M Cross-site Scripting (XSS)	<0:1.11.0-2.redhat_00001.1.el8eap
M Information Exposure	<0:1.14.0-1.redhat_00001.1.el8eap
M Improper Authentication	<0:1.14.0-1.redhat_00001.1.el8eap
M Information Exposure Through Log Files	<0:1.11.0-2.redhat_00001.1.el8eap
M Improper Input Validation	<0:1.14.0-1.redhat_00001.1.el8eap
M Resource Exhaustion	<0:1.14.0-1.redhat_00001.1.el8eap