high7.1
CVE-2022-40313
Moodle Stored Cross-site Scripting and page denial of service
Impact
Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an Cross-site Scripting risk or a page failing to load.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | moodle/moodle | >= 3.9, < 3.9.17 | 3.9.17 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | from 3.9.0 before 3.9.17 from 3.11.0 before 3.11.10 from 4.0.0 before 4.0.4 |
| Fedoraproject | Extra Packages For Enterprise Linux | Version 8.0 |
| Fedoraproject | Fedora | Versions 35, 36 |