CVE-2023-30944
Moodle: minor sql injection risk in external wiki method for listing pages
Résumé
Moodle: minor sql injection risk in external wiki method for listing pages
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.21"},{"introduced":"3.11.0"},{"fixed":"3.11.14"},{"introduced":"4.0.0"},{"fixed":"4.0.8"},{"introduced":"4.1.0"},{"fixed":"4.1.3"}]}]
Références
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org