CVE-2023-30944
Moodle: minor sql injection risk in external wiki method for listing pages
Summary
Moodle: minor sql injection risk in external wiki method for listing pages
Original description
The description as published by the source.
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.21"},{"introduced":"3.11.0"},{"fixed":"3.11.14"},{"introduced":"4.0.0"},{"fixed":"4.0.8"},{"introduced":"4.1.0"},{"fixed":"4.1.3"}]}]
References
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org