Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-28333

Moodle: pix helper potential mustache code injection risk

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 4.1.0 to < 4.1.2affected
  • 4.0.0 to < 4.0.7affected
  • 3.11.0 to < 3.11.13affected
  • 0 to < 3.9.20affected

References