CVE-2023-5548
Moodle: cache poisoning risk with endpoint revision numbers
Summary
Moodle: cache poisoning risk with endpoint revision numbers
Original description
The description as published by the source.
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.24"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"4.0.0"},{"fixed":"4.0.11"},{"introduced":"4.1.0"},{"fixed":"4.1.6"},{"introduced":"4.2.0"},{"fixed":"4.2.3"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org