PT-2019-18389 · Moodle · Moodle

Jean-Marie Bourbon · Published 2019-03-18 · Updated 2022-05-14 · CVE-2019-6970

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moodle versions 3.5.x through 3.5.3

Description The issue allows for a Server-Side Request Forgery (SSRF) attack. A registered user can exploit the edit blog.php script by adding a malicious URL or TCP port to target internal networks or internet-hosted servers, bypassing firewall rules and IP filtering. This is a "blind" vulnerability, as there is no response available on the Moodle website, requiring attackers to use a "time-based" approach to exploit it.

Recommendations For Moodle versions 3.5.x through 3.5.3, update to version 3.5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the edit blog.php script to minimize the risk of exploitation. Avoid using the edit blog.php script to add external RSS feed resources until the issue is resolved.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2019-6970

GHSA-VJXX-54VW-Q59F

Affected Products

Moodle

References · 10

• https://ubuntu.com/security/CVE-2019-6970 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-6970 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-6970 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6970 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vjxx-54vw-q59f · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6970 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://excellium-services.com/cert-xlm-advisory · Note
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6970 · Note
• https://excellium-services.com/cert-xlm-advisory/cve-2019-6970 · Note