CVE-2023-23923
Moodle: possible to set the preferred "start page" of other users
Summary
Moodle: possible to set the preferred "start page" of other users
Original description
The description as published by the source.
The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.19"},{"introduced":"3.11.0"},{"fixed":"3.11.12"},{"introduced":"4.0.0"},{"fixed":"4.0.6"},{"introduced":"4.1.0"},{"fixed":"4.1.1"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org