VYPR
← All advisories
Medium severity6.5OSV Advisory· Published May 2, 2023· Updated Jun 17, 2026

CVE-2023-30943

CVE-2023-30943

Description

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
moodle/moodlePackagist
< 4.2.0-rc24.2.0-rc2

Affected products

8
  • osv-coords2 versions
    pkg:bitnami/moodlepkg:composer/moodle/moodle
    >= 4.1.0, < 4.1.3+ 1 more
    • (no CPE)range: >= 4.1.0, < 4.1.3
    • (no CPE)range: < 4.2.0-rc2
  • Moodle/MoodleOSV2 versions
    v4.1.0, v4.1.1, v4.1.2+ 1 more
    • (no CPE)range: v4.1.0, v4.1.1, v4.1.2
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=4.1.0,<4.1.3
  • Fedoraproject/Extra Packages For Enterprise Linux
    cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

14

News mentions

0

No linked articles in our index yet.