CVE-2023-28330
Moodle: authenticated arbitrary file read through malformed backup file
Résumé
Moodle: authenticated arbitrary file read through malformed backup file
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.20"},{"introduced":"3.11.0"},{"fixed":"3.11.13"},{"introduced":"4.0.0"},{"fixed":"4.0.7"},{"introduced":"4.1.0"},{"fixed":"4.1.2"}]}]
Références
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org
- web git.moodle.org