Main Vulnerability Database Vulnerabilities #VU17355

Security restrictions bypass in Moodle - CVE-2019-3810

Published: February 1, 2019 / Updated: June 17, 2021

Vulnerability identifier: #VU17355

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-3810

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to the /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. A remote attacker can bypass security restrictions to conduct further attacks.

Affected software

Moodle
Fedora
moodle

How to mitigate CVE-2019-3810

The vulnerability has been addressed in the versions 3.1.16, 3.4.7, 3.5.4, 3.6.2.

Moodle - addressed in versions 3.1.16, 3.4.7, 3.5.4, 3.6.2
moodle - addressed in versions 3.1.16-1.el7, 3.4.7-1.fc28, 3.5.4-1.fc29

Links to Public Exploits and PoC-codes

Exploit #5585 - Moodle 3.6.1 - Persistent Cross-Site Scripting (XSS) (June 17, 2021)

External References

https://moodle.org/mod/forum/discuss.php?d=381230