~ / search / GHSA-7mmc-22g7-3xq2

GHSA-7mmc-22g7-3xq2

Moodle SQL Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-30944

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle < 4.2.0-rc2 4.2.0-rc2

Details

As written in the advisory (Markdown source, shown as plain text).

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.

References

External links from the advisory. They lead to third-party sites.