GHSA-cwh2-q44x-5w3cMediumCVSS 5.3

Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

Published
November 9, 2023
Last Modified
November 17, 2023

🔗 CVE IDs covered (1)

CVE-2023-5548 →

📋 Description

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.

🎯 Affected products1

  • composer/moodle/moodle:< 4.3.0-rc2

🔗 References (6)