Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-28335

Fixed upstream EPSS <1%CVSS 8.8

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

Published 2023-03-23 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.1.2

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix