PT-2023-27383 · Moodle · Moodle

Published 2023-08-29 · Updated 2023-09-11 · CVE-2023-40320

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description The issue concerns a self-XSS vulnerability that can lead to account takeover. Technical details about the issue are available, but specific information such as the number of potentially affected devices or real-world incidents is not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-40320

Affected Products

Moodle

References · 6

• https://cve.org/CVERecord?id=CVE-2023-40320 · Security Note
• https://ubuntu.com/security/CVE-2023-40320 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-40320 · Vendor Advisory
• https://twitter.com/Sonar_Research/status/1696593585792061786 · Twitter Post
• https://twitter.com/tracrium/status/1698836137479999740 · Twitter Post
• https://twitter.com/YNizry/status/1696595706679562733 · Twitter Post