Skip to content
OpenAdvisories
High WID-SEC-2024-1096 14 CVEs

Moodle: Mehrere Schwachstellen

Published May 12, 2024 · Updated Jun 4, 2024 · Revision 3 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Code auszuführen, ReCAPTCHA zu umgehen, vertrauliche Informationen offenzulegen oder einen Cross-Site Scripting (XSS)-Angriff durchzuführen.

Product

Moodle ist ein Software-Paket, um internetbasierte Kurse zu entwickeln und durchzuführen. Es ist ein globales Softwareentwicklungsprojekt, das einen konstruktivistischen Lehr- und Lernansatz unterstützt.

Vulnerabilities 14

  • Critical 9.8
    CVE-2024-33999

    moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php

    The referrer URL used by MFA required additional sanitizing, rather than being used directly.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 8.8
    CVE-2024-34007

    moodle: logout CSRF in admin/tool/mfa/auth.php

    The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 8.4
    CVE-2024-34001

    moodle: CSRF risk in admin preset tool management of presets

    Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 7.5
    CVE-2024-34009

    moodle: ReCAPTCHA can be bypassed on the login page

    Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2024-34002

    moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_feedback backup

    In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file includ…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2024-34004

    moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup

    In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2024-34005

    moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup

    In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local fi…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.2
    CVE-2024-33996

    moodle: broken access control when setting calendar event type

    Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.

    Moodle moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.1
    CVE-2024-33997

    moodle: stored XSS risk when editing another user's equation in equation editor

    Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 5.9
    CVE-2024-34003

    moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup

    In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and direct access to the web server outside of the Moodle webroot could execute a local file includ…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 5.4
    CVE-2024-33998

    moodle: stored XSS via user's name on participants page when opening some options

    Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2024-34000

    moodle: stored XSS in lesson overview report via user ID number

    ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2024-34006

    moodle: unsanitized HTML in site log for config_log_created

    The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.5
    CVE-2024-34008

    moodle: CSRF risk in analytics management of models

    Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.

    moodle/moodle moodle Web / CMS Ubuntu Packagist

Revision history

  1. #3

    CVE's ergänzt

  2. #2

    CVE ergänzt

  3. #1

    Initiale Fassung

References