CVE-2023-5548CWE-349

Moodle: cache poisoning risk with endpoint revision numbers

Low · published November 9, 2023

CVSS v3.1
3.3
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.6th percentile
Weakness
CWE-349 · Acceptance of Extraneous Untrusted Data With Trusted Data
Published
2023-11-09T19:36Z
EPSS history
Timeline
  • 09 NOV 19:36Z
    Moodle: cache poisoning risk with endpoint revision numbers
    cvelistv5