PT-2019-11610 · Moodle+1 · Moodle+1

Callum Carney · Publicado 2019-07-12 · Atualizado 2023-02-02 · CVE-2019-10186

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7.1 Moodle versions prior to 3.6.5 Moodle versions prior to 3.5.7

Description: A flaw was found in the XML loading/unloading admin tool where a sesskey (CSRF) token was not being utilized.

Recommendations: For versions prior to 3.7.1, update to version 3.7.1 or later. For versions prior to 3.6.5, update to version 3.6.5 or later. For versions prior to 3.5.7, update to version 3.5.7 or later.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

ALT-PU-2019-2248

ALT-PU-2019-2566

CVE-2019-10186

GHSA-WV9C-PFPM-4WC5

Produtos afetados

Alt Linux

Moodle

Referências · 12

• https://github.com/moodle/moodle · Nota
• https://github.com/moodle/moodle/commit/ea1ac3c7efbddbdb210ea4c75e7156c7d7ee914b · Nota
• https://osv.dev/vulnerability/CVE-2019-10186 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10186 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-10186 · Aviso do Fabricante
• http://securityfocus.com/bid/109175 · Nota
• https://ubuntu.com/security/CVE-2019-10186 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-10186 · Nota de Segurança
• https://moodle.org/mod/forum/discuss.php?d=388567#p1566329 · Aviso do Fabricante
• https://web.archive.org/web/20210125055044/https://securityfocus.com/bid/109175 · Nota
• https://osv.dev/vulnerability/GHSA-wv9c-pfpm-4wc5 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10186 · Nota