CVE-2023-28331

Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.

Score

CVSS 3.1 6.1 Medium

Status

Modified - patrick@puiterwijk.org

Published

2023-03-23

Last modified

2025-02-25

Weaknesses

CWE-79

Affected products

• Moodle (Moodle)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2179418
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZ…
• https://moodle.org/mod/forum/discuss.php?d=445063