Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-28330

Fixed upstream EPSS 1%CVSS 6.5

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

Published 2023-03-23 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.1.2
Packagistmoodle/moodle4.0.7
Packagistmoodle/moodle3.11.13
Packagistmoodle/moodle3.9.20

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix