Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2023-30944

Moodle: minor sql injection risk in external wiki method for listing pages

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 4.1.0 to < 4.1.3affected
  • 4.0.0 to < 4.0.8affected
  • 3.11.0 to < 3.11.14affected
  • 0 to < 3.9.21affected

References