CVE-2023-5548

LOW

Moodle - Cache Poisoning via File Serving Endpoints

Title source: llm
STIX 2.1

Description

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.

Scores

CVSS v3 3.3
EPSS 0.0028
EPSS Percentile 51.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-349 CWE-345
Status published
Products (4)
fedoraproject/extra_packages_for_enterprise_linux 7.0
fedoraproject/fedora 38
moodle/moodle < 3.9.24
moodle/moodle 0 - 4.3.0-rc2Packagist
Published Nov 09, 2023
Tracked Since Feb 18, 2026