PT-2017-17767 · Moodle · Moodle

Daniel Kosinski · Publicado 2017-05-15 · Atualizado 2022-05-13 · CVE-2017-7490

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x

Description A missing capability check in Moodle allows for the searching of arbitrary blogs.

Recommendations For versions 2.x through 3.x, apply the necessary patch or update to include the capability check and restrict unauthorized access to blog searches.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2017-7490

GHSA-9X63-M3CC-QF3G

Produtos afetados

Moodle

Referências · 8

• https://github.com/moodle/moodle · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7490 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7490 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-7490 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-7490 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-9x63-m3cc-qf3g · Aviso do Fabricante
• https://moodle.org/mod/forum/discuss.php?d=352354 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7490 · Aviso do Fabricante