CVE-2023-28333: Moodle: pix helper potential mustache code injection risk
The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-28333?
CVE-2023-28333 is a vulnerability that affects Moodle LMS versions 3.9.0 to 3.9.20, 3.11.0 to 3.11.13, 4.0.0 to 4.0.7, and 4.1.0 to 4.1.1, where the Mustache pix helper contained a potential Mustache injection risk if combined with user input.
What is the severity of CVE-2023-28333?
CVE-2023-28333 has a severity rating of 9.8, which is critical.
How does CVE-2023-28333 impact Moodle LMS?
CVE-2023-28333 does not appear to be implemented/exploitable anywhere in the core Moodle LMS.
How do I fix CVE-2023-28333?
To fix CVE-2023-28333, it is recommended to update Moodle LMS to versions 3.9.21, 3.11.14, 4.0.8, or 4.1.2, which contain the necessary patches to address the vulnerability.
Where can I find more information about CVE-2023-28333?
More information about CVE-2023-28333 can be found at: [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/) and [https://moodle.org/mod/forum/discuss.php?d=445065](https://moodle.org/mod/forum/discuss.php?d=445065)