PT-2023-3325 · Moodle+2 · Moodle+2

Paul Holden · Published 2020-11-08 · Updated 2024-04-19 · CVE-2023-30944

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description The issue exists due to insufficient sanitization of user-supplied data in the external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database. This could potentially allow the attacker to read, delete, or modify data in the database and gain full control over the vulnerable application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

ALT-PU-2020-3235

ALT-PU-2023-2012

ALT-PU-2023-2057

ALT-PU-2023-5127

BDU:2023-03480

BIT-MOODLE-2023-30944

CVE-2023-30944

GHSA-7MMC-22G7-3XQ2

Affected Products

Alt Linux

Moodle

Red Os

References · 25

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54TM5H5PDUDYXOQ7X7PPYWP4AJDAE73I · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03480 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30944 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-30944 · Security Note
• https://osv.dev/vulnerability/GHSA-7mmc-22g7-3xq2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/54TM5H5PDUDYXOQ7X7PPYWP4AJDAE73I · Vendor Advisory
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77187 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-30944 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZBWRVUJF7HI53XCJPJ3YJZPOV5HBRUY · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2023-30944 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2188606 · Patch
• https://goslinux.fssp.gov.ru/2726972 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-30944 · Vendor Advisory
• https://moodle.org/mod/forum/discuss.php?d=446286 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBFSXRYLT4ICKJVQSRBAOUDMDRVSVBLS · Vendor Advisory