Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-28329

Fixed upstream EPSS 1%CVSS 6.3

Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).

Published 2023-03-23 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.1.2
Packagistmoodle/moodle4.0.7
Packagistmoodle/moodle3.11.13
Packagistmoodle/moodle3.9.20

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix