CVE-2023-28330

—

CVSS 3.1

6.5 medium

EPSS

1%p66

Published

Mar 23, 2023 (Mar 23, 2023)

Modified

Jun 17, 2026

Description

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

Vendors: moodle
Products: moodle
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.