Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-40313

Fixed upstream EPSS <1%CVSS 7.1

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load.

Published 2022-09-30 · CVE record · OSV

Products: moodle, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle3.9.17
Packagistmoodle/moodle3.11.10
Packagistmoodle/moodle4.0.4

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix