Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-28334

Fixed upstream EPSS <1%CVSS 4.3

Authenticated users were able to enumerate other users' names via the learning plans page.

Published 2023-03-23 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.1.2
Packagistmoodle/moodle4.0.7
Packagistmoodle/moodle3.11.13
Packagistmoodle/moodle3.9.20

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix