~ / search / GHSA-w8x2-w4qr-v3x4

GHSA-w8x2-w4qr-v3x4

Moodle Code Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-5540

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle < 4.3.0-rc2 4.3.0-rc2

Details

As written in the advisory (Markdown source, shown as plain text).

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.

References

External links from the advisory. They lead to third-party sites.