~ / search / GHSA-3xxm-3g3c-w579

GHSA-3xxm-3g3c-w579

Moodle Code Injection vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-5539

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle < 4.3.0-rc2 4.3.0-rc2

Details

As written in the advisory (Markdown source, shown as plain text).

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.

References

External links from the advisory. They lead to third-party sites.