Multiple vulnerabilities in Moodle



| Updated: 2022-07-30
Risk Medium
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2018-1042
CVE-2018-1043
CVE-2018-1044
CWE-ID CWE-918
CWE-20
CWE-200
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 Moodle
Web applications / Other software

Vendor moodle.org

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Server-Side Request Forgery (SSRF)

EUVDB-ID: #VU37616

Risk: Medium

CVSSv4.0: 5.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2018-1042

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

Exploit availability: Yes

Description

The vulnerability allows a remote authenticated user to gain access to sensitive information.

Moodle 3.x has Server Side Request Forgery in the filepicker.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Moodle: 3.2.0 - 3.4.0

CPE2.3 External links

https://packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.html
https://www.securityfocus.com/bid/102752
https://moodle.org/mod/forum/discuss.php?d=364381


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

2) Input validation error

EUVDB-ID: #VU37617

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2018-1043

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote authenticated user to manipulate data.

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Moodle: 3.2.0 - 3.4.0

CPE2.3 External links

https://www.securityfocus.com/bid/102769
https://moodle.org/mod/forum/discuss.php?d=364382


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Information disclosure

EUVDB-ID: #VU37618

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-1044

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

Description

The vulnerability allows a remote authenticated user to gain access to sensitive information.

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Moodle: 3.2.0 - 3.4.0

CPE2.3 External links

https://www.securityfocus.com/bid/102754
https://moodle.org/mod/forum/discuss.php?d=364383


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###