PT-2019-18389 · Moodle · Moodle

Jean-Marie Bourbon · Publicado 2019-03-18 · Atualizado 2022-05-14 · CVE-2019-6970

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moodle versions 3.5.x through 3.5.3

Description The issue allows for a Server-Side Request Forgery (SSRF) attack. A registered user can exploit the edit blog.php script by adding a malicious URL or TCP port to target internal networks or internet-hosted servers, bypassing firewall rules and IP filtering. This is a "blind" vulnerability, as there is no response available on the Moodle website, requiring attackers to use a "time-based" approach to exploit it.

Recommendations For Moodle versions 3.5.x through 3.5.3, update to version 3.5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the edit blog.php script to minimize the risk of exploitation. Avoid using the edit blog.php script to add external RSS feed resources until the issue is resolved.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2019-6970

GHSA-VJXX-54VW-Q59F

Produtos afetados

Moodle

Referências · 10

• https://github.com/moodle/moodle · Nota
• https://excellium-services.com/cert-xlm-advisory · Nota
• https://ubuntu.com/security/CVE-2019-6970 · Aviso do Fabricante
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6970 · Nota
• https://cve.org/CVERecord?id=CVE-2019-6970 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-6970 · Nota de Segurança
• https://excellium-services.com/cert-xlm-advisory/cve-2019-6970 · Nota
• https://osv.dev/vulnerability/CVE-2019-6970 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-vjxx-54vw-q59f · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6970 · Aviso do Fabricante