VYPR
← All advisories
Medium severity5.6OSV Advisory· Published May 2, 2023· Updated Jun 17, 2026

CVE-2023-30944

CVE-2023-30944

Description

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
moodle/moodlePackagist
< 4.2.0-rc24.2.0-rc2

Affected products

8
  • Moodle/MoodleOSV2 versions
    v3.11.0, v3.11.1, v3.11.10, …+ 1 more
    • (no CPE)range: v3.11.0, v3.11.1, v3.11.10, …
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=3.9.0,<3.9.21
  • ghsa-coords2 versions
    pkg:composer/moodle/moodlepkg:bitnami/moodle
    < 4.2.0-rc2+ 1 more
    • (no CPE)range: < 4.2.0-rc2
    • (no CPE)range: >= 3.9.0, < 3.9.21
  • Fedoraproject/Extra Packages For Enterprise Linux
    cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

14

News mentions

0

No linked articles in our index yet.