CVE-2023-30943

6.5

MEDIUMCVSS v3

Published

May 2, 2023

Affected

10 projects

Assigned by

[email protected]

Severity scale

010

Description

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.

moodle/moodle

GitHubMoodle - the world's open source learning platform

>= 4.1.0, < 4.1.3NVD

moodle

NPMModel module for node for use with both mongodb and mysql.

>= 4.1.0, < 4.1.3NVD

moodle

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Moodle web services connection library

>= 4.1.0, < 4.1.3NVD

moodle

RubyGemsInteract with Moodle from ruby

>= 4.1.0, < 4.1.3NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

>= 4.1.0, < 4.1.3NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 36, = 37, = 38NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 36, = 37, = 38NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 36, = 37, = 38NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 36, = 37, = 38NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 36, = 37, = 38NVD

Security Advisories

CVE-2023-30943

Description

More on this CVE