CVE-2022-40313 - Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load

HIGH

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load

Published Sep 30, 2022

7.1

HIGH

CVSS 3.1

EPSS 0.64%

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Moodle

n/a

Version	Status	Constraints
4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2128146		x_refsource_MISCIssue TrackingThird Party Advisory
https://github.com/advisories/GHSA-jqgr-gh62-jf53		Advisory
https://moodle.org/mod/forum/discuss.php?d=438392		x_refsource_MISCPatchVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-40313