~ / search / GHSA-cwh2-q44x-5w3c

GHSA-cwh2-q44x-5w3c

Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-5548

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle < 4.3.0-rc2 4.3.0-rc2

Details

As written in the advisory (Markdown source, shown as plain text).

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.

References

External links from the advisory. They lead to third-party sites.