CVE-2023-5548
Moodle: cache poisoning risk with endpoint revision numbers
Résumé
Moodle: cache poisoning risk with endpoint revision numbers
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.24"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"4.0.0"},{"fixed":"4.0.11"},{"introduced":"4.1.0"},{"fixed":"4.1.6"},{"introduced":"4.2.0"},{"fixed":"4.2.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org