CVE Vulnerabilities

CVE-2023-28330

Published: Mar 23, 2023 | Modified: Apr 19, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 3.9.0 (excluding) 3.9.20 (excluding)
Moodle Moodle 3.11.0 (excluding) 3.11.13 (excluding)
Moodle Moodle 4.0.0 (excluding) 4.0.7 (excluding)
Moodle Moodle 3.9.0 (including) 3.9.0 (including)
Moodle Moodle 3.11.0 (including) 3.11.0 (including)
Moodle Moodle 4.0.0 (including) 4.0.0 (including)
Moodle Moodle 4.1.0 (including) 4.1.0 (including)
Moodle Moodle 4.1.1 (including) 4.1.1 (including)
Moodle Ubuntu bionic *
Moodle Ubuntu trusty *
Moodle Ubuntu xenial *

References