Vulnerability · Published Jun 22, 2023 · Assigned by fedora
CVE-2023-35133Moodle: ssrf risk due to insufficient check on the curl blocked hosts
High 7.5
In plain English
A high-severity server-side request forgery in moodle. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.8%top 42.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist | moodle/moodle | 4.2.1 | GHSA-xxp4-mf4h-6cwm |
| Packagist | moodle/moodle | 4.1.4 | GHSA-xxp4-mf4h-6cwm |
| Packagist | moodle/moodle | 4.0.9 | GHSA-xxp4-mf4h-6cwm |
| Packagist | moodle/moodle | 3.11.15 | GHSA-xxp4-mf4h-6cwm |
| Packagist | moodle/moodle | 3.9.22 | GHSA-xxp4-mf4h-6cwm |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| moodle | 4.2.0 – before 4.2.14.1.0 – before 4.1.44.0.0 – before 4.0.93.11.0 – before 3.11.150 – before 3.9.22 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- RHBZ#2214373 issue-tracking, x_refsource_REDHAT
- FEDORA-2023-3ca351353f vendor-advisory
- FEDORA-2023-ce24b63b36 vendor-advisory
- https://moodle.org/mod/forum/discuss.php?d=447831