Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-28333

The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).

Published

2023-03-23T21:15:20.127

Last Modified

2024-11-21T07:54:51.917

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-94
  • Type: Primary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 3.9.20 Yes
Application moodle moodle < 3.11.13 Yes
Application moodle moodle < 4.0.7 Yes
Application moodle moodle 3.9.0 Yes
Application moodle moodle 3.11.0 Yes
Application moodle moodle 4.0.0 Yes
Application moodle moodle 4.1.0 Yes
Application moodle moodle 4.1.1 Yes
Operating System fedoraproject fedora 36 Yes
References