CVE-2023-28330

Moodle: authenticated arbitrary file read through malformed backup file

概要

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.20"},{"introduced":"3.11.0"},{"fixed":"3.11.13"},{"introduced":"4.0.0"},{"fixed":"4.0.7"},{"introduced":"4.1.0"},{"fixed":"4.1.2"}]}]

参照URL

advisory moodle.org
web lists.fedoraproject.org
web bugzilla.redhat.com
web nvd.nist.gov