CVE-2023-5544: Moodle: stored xss and potential idor risk in wiki comments
Published Oct 12, 2023
·Updated
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
Affected Software
15 affected componentsFixes available
composer/moodle/moodle<4.3.0-rc2
4.3.0-rc2
redhat/moodle<4.2.3
4.2.3
redhat/moodle<4.1.6
4.1.6
redhat/moodle<4.0.11
4.0.11
redhat/moodle<3.11.17
3.11.17
redhat/moodle<3.9.24
3.9.24
Moodle Moodle>=3.9.0<3.9.24
Moodle Moodle>=3.11.0<3.11.17
Moodle Moodle>=4.0.0<4.0.11
Moodle Moodle>=4.1.0<4.1.6
Moodle Moodle>=4.2.0<4.2.3
redhat Enterprise Linux=7.0
Fedoraproject Fedora=37
Fedoraproject Fedora=38
Fedoraproject Fedora=39
Remediation
Patch Available
Event History
Nov 9, 2023
CVE Published
via MITRE·07:32 PM
Data Sourced
via MITRE·07:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
09:30 PM
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-5544.
2
What is the severity of CVE-2023-5544?
The severity of CVE-2023-5544 is medium.
3
What software is affected by CVE-2023-5544?
The affected software is Moodle version 3.9.0 to 4.2.3 and Redhat Enterprise Linux 7.0, Fedoraproject Fedora 37, 38, and 39.
4
How can I fix the vulnerability CVE-2023-5544?
To fix CVE-2023-5544, you should update Moodle to version 4.2.3 or apply the recommended patches for your specific version, and follow the guidelines provided by Moodle on their website.
5
Where can I find more information about CVE-2023-5544?
You can find more information about CVE-2023-5544 on the Moodle website, Git repository, and the Redhat Bugzilla entry.