CVE-2023-23923
Moodle: possible to set the preferred "start page" of other users
Résumé
Moodle: possible to set the preferred "start page" of other users
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.19"},{"introduced":"3.11.0"},{"fixed":"3.11.12"},{"introduced":"4.0.0"},{"fixed":"4.0.6"},{"introduced":"4.1.0"},{"fixed":"4.1.1"}]}]
Références
- advisory bugzilla.redhat.com
- advisory moodle.org
- patch git.moodle.org
- web nvd.nist.gov