CVE-2023-28333

CVE-2023-28333: Moodle: pix helper potential mustache code injection risk

Weakness CWE-94 · Code injection

Published March 23, 2023

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).

Key dates

02Disclosure timeline

March 23, 2023 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-28333 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2026-4963 huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection CVE-2022-39327 Improper Control of Generation of Code ('Code Injection') in Azure CLI CVE-2025-22133 WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE) CVE-2026-41149 Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection CVE-2021-32829 Post-authentication Remote Code Execution (RCE) in ZStack REST API