PT-2023-4763 · Tinymce+1 · Tinymce+1

Yaniv Nizry · Published 2023-04-19 · Updated 2024-04-19 · CVE-2023-30943

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 4.1.x through 4.1.2 Moodle versions 4.2.x through 4.1.9 is not correct, the correct is: Moodle versions 4.2.x before 4.2.0

Description The issue exists because the application allows a user to control the path of the folder to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. This can lead to unauthenticated arbitrary folder creation, and potentially to remote code execution (RCE).

Recommendations For Moodle versions 4.1.x through 4.1.2, update to version 4.1.3 or later. For Moodle versions 4.2.x before 4.2.0, update to version 4.2.0 or later. As a temporary workaround, consider disabling the TinyMCE loaders until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-73

CWE-610

Related Identifiers

BDU:2023-05206

BIT-MOODLE-2023-30943

CVE-2023-30943

GHSA-22GJ-8QJ2-FJ46

Affected Products

Moodle

Tinymce

References · 42

• 🔥 https://github.com/d0rb/CVE-2023-30943 · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2023-30943 · Exploit
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54TM5H5PDUDYXOQ7X7PPYWP4AJDAE73I · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2188605 · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBFSXRYLT4ICKJVQSRBAOUDMDRVSVBLS · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-22gj-8qj2-fj46 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-30943 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/54TM5H5PDUDYXOQ7X7PPYWP4AJDAE73I · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZBWRVUJF7HI53XCJPJ3YJZPOV5HBRUY · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30943 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2023-30943 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30943 · Security Note
• https://bdu.fstec.ru/vul/2023-05206 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/MZBWRVUJF7HI53XCJPJ3YJZPOV5HBRUY · Vendor Advisory
• https://moodle.org/mod/forum/discuss.php?d=446285 · Vendor Advisory