PT-2017-17766 · Moodle · Moodle

Vuk Ivanovic · Published 2017-05-15 · Updated 2022-05-13 · CVE-2017-7489

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x

Description The issue allows remote authenticated users to take ownership of arbitrary blogs by editing an external blog link.

Recommendations For Moodle versions 2.x through 3.x, update to a version that includes a fix for this issue, as using an older version may allow unauthorized users to take control of blogs.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-7489

GHSA-M34M-FGH4-V7CX

Affected Products

Moodle

References · 8

• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7489 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m34m-fgh4-v7cx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7489 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-7489 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=352353 · Vendor Advisory
• https://github.com/moodle/moodle · Note