PT-2019-16735 · Moodle · Moodle

Alejandro Parodi · Publicado 2019-03-25 · Atualizado 2022-05-13 · CVE-2019-3809

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moodle versions 3.1 to 3.1.15 Moodle versions prior to 3.1

Description A flaw in the mybackpack functionality allowed setting the URL of badges to any value, instead of restricting it to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind Server-Side Request Forgery (SSRF) via requests made by the page.

Recommendations For Moodle versions 3.1 to 3.1.15, consider restricting the mybackpack functionality to only allow the Mozilla Open Badges backpack URL until a fix is available. For Moodle versions prior to 3.1, consider updating to a supported version or restricting the mybackpack functionality to minimize the risk of exploitation.

Correção

SSRF

CSRF

Enumeração de Fraquezas

CWE-918

CWE-352

Identificadores relacionados

CVE-2019-3809

GHSA-JP4G-R8C9-3534

Produtos afetados

Moodle

Referências · 10

• https://github.com/moodle/moodle · Nota
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64222 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3809 · Nota de Segurança
• https://moodle.org/mod/forum/discuss.php?d=381229#p1536766 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-3809 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-jp4g-r8c9-3534 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3809 · Correção
• https://ubuntu.com/security/CVE-2019-3809 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-3809 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-3809 · Nota de Segurança