CVE-2023-5548: Moodle: cache poisoning risk with endpoint revision numbers
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-5548?
CVE-2023-5548 is a vulnerability that poses a cache poisoning risk with endpoint revision numbers.
What is the severity of CVE-2023-5548?
The severity of CVE-2023-5548 is medium with a CVSS score of 5.3.
Which software versions are affected by CVE-2023-5548?
The affected software versions are Moodle 4.2.3, 4.1.6, 4.0.11, 3.11.17, and 3.9.24.
How can I fix CVE-2023-5548?
To fix CVE-2023-5548, update your Moodle installation to version 4.2.3, 4.1.6, 4.0.11, 3.11.17, or 3.9.24 depending on your current version.
Where can I find more information about CVE-2023-5548?
You can find more information about CVE-2023-5548 at the following references: [link1](http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77846), [link2](https://bugzilla.redhat.com/show_bug.cgi?id=2243449), [link3](https://moodle.org/mod/forum/discuss.php?d=451589).