PT-2019-16735 · Moodle · Moodle

Alejandro Parodi · Published 2019-03-25 · Updated 2022-05-13 · CVE-2019-3809

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moodle versions 3.1 to 3.1.15 Moodle versions prior to 3.1

Description A flaw in the mybackpack functionality allowed setting the URL of badges to any value, instead of restricting it to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind Server-Side Request Forgery (SSRF) via requests made by the page.

Recommendations For Moodle versions 3.1 to 3.1.15, consider restricting the mybackpack functionality to only allow the Mozilla Open Badges backpack URL until a fix is available. For Moodle versions prior to 3.1, consider updating to a supported version or restricting the mybackpack functionality to minimize the risk of exploitation.

Fix

SSRF

CSRF

Weakness Enumeration

CWE-918

CWE-352

Related Identifiers

CVE-2019-3809

GHSA-JP4G-R8C9-3534

Affected Products

Moodle

References · 10

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3809 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=381229#p1536766 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-3809 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jp4g-r8c9-3534 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3809 · Patch
• https://ubuntu.com/security/CVE-2019-3809 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-3809 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-3809 · Security Note
• https://github.com/moodle/moodle · Note