PT-2024-21253 · Phpbb+1 · Phpbb+1

Piotr Widak · Published 2024-02-19 · Updated 2024-06-19 · CVE-2024-25979

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The issue concerns the forum search functionality, where the URL parameters accepted were not limited to the allowed parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-233

Related Identifiers

ALT-PU-2024-8851

ALT-PU-2024-9067

BIT-MOODLE-2024-25979

CVE-2024-25979

GHSA-6VJF-48FH-VXXJ

Affected Products

Alt Linux

Phpbb

References · 16

• https://osv.dev/vulnerability/UBUNTU-CVE-2024-25979 · Vendor Advisory
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69774 · Patch
• https://cve.org/CVERecord?id=CVE-2024-25979 · Security Note
• https://osv.dev/vulnerability/BIT-moodle-2024-25979 · Vendor Advisory
• https://moodle.org/mod/forum/discuss.php?d=455635 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6vjf-48fh-vxxj · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25979 · Security Note
• https://ubuntu.com/security/CVE-2024-25979 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-25979 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/6eaeeda6cf759672def05a85afe9e4d521739166 · Note
• https://t.me/cvenotify/71912 · Telegram Post
• https://t.me/cvenotify/72638 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2264095 · Note