Mustache Injection Vulnerability in Moodle LMS by Moodle

CVE-2023-28333

What is CVE-2023-28333?

The Mustache pix helper in Moodle LMS presents a potential Mustache injection risk when combined with user input. While this vulnerability does not appear to be actively exploitable within the core Moodle implementation, it highlights the importance of validating user input effectively to mitigate such risks. Organizations using Moodle should remain vigilant and ensure that any extensions or custom implementations that utilize the Mustache templating engine are properly secured against injection attacks.

References