Search
Find a vulnerability
Search criteria
Related vulnerabilities
CERTFR-2023-AVI-0671
Vulnerability from certfr_avis - Published: 2023-08-21 - Updated: 2023-08-21
De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moodle | Moodle | Moodle versions antérieures à 3.9.23 | ||
| Moodle | Moodle | Moodle versions 3.11.x antérieures à 3.11.16 | ||
| Moodle | Moodle | Moodle versions 4.0.x antérieures à 4.0.10 | ||
| Moodle | Moodle | Moodle versions 4.1.x antérieures à 4.1.5 | ||
| Moodle | Moodle | Moodle versions 4.2.x antérieures à 4.2.2 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Moodle versions ant\u00e9rieures \u00e0 3.9.23",
"product": {
"name": "Moodle",
"vendor": {
"name": "Moodle",
"scada": false
}
}
},
{
"description": "Moodle versions 3.11.x ant\u00e9rieures \u00e0 3.11.16",
"product": {
"name": "Moodle",
"vendor": {
"name": "Moodle",
"scada": false
}
}
},
{
"description": "Moodle versions 4.0.x ant\u00e9rieures \u00e0 4.0.10",
"product": {
"name": "Moodle",
"vendor": {
"name": "Moodle",
"scada": false
}
}
},
{
"description": "Moodle versions 4.1.x ant\u00e9rieures \u00e0 4.1.5",
"product": {
"name": "Moodle",
"vendor": {
"name": "Moodle",
"scada": false
}
}
},
{
"description": "Moodle versions 4.2.x ant\u00e9rieures \u00e0 4.2.2",
"product": {
"name": "Moodle",
"vendor": {
"name": "Moodle",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-40324",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40324"
},
{
"name": "CVE-2023-40323",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40323"
},
{
"name": "CVE-2023-40319",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40319"
},
{
"name": "CVE-2022-31160",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31160"
},
{
"name": "CVE-2021-41182",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41182"
},
{
"name": "CVE-2023-40318",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40318"
},
{
"name": "CVE-2023-40320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40320"
},
{
"name": "CVE-2023-40322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40322"
},
{
"name": "CVE-2023-40316",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40316"
},
{
"name": "CVE-2023-40321",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40321"
},
{
"name": "CVE-2021-41184",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41184"
},
{
"name": "CVE-2021-41183",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41183"
},
{
"name": "CVE-2022-39369",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39369"
},
{
"name": "CVE-2023-40325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40325"
},
{
"name": "CVE-2023-40317",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40317"
}
],
"initial_release_date": "2023-08-21T00:00:00",
"last_revision_date": "2023-08-21T00:00:00",
"links": [],
"reference": "CERTFR-2023-AVI-0671",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-08-21T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Moodle. Certaines\nd\u0027entre elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de\ns\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code arbitraire \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Moodle",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0020 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449641"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0026 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449647"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0025 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449646"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0024 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449645"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0030 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449651"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0028 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449649"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0029 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449650"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0023 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449644"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0021 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449642"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0022 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449643"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0027 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449648"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Moodle MSA-23-0019 du 21 ao\u00fbt 2023",
"url": "https://moodle.org/mod/forum/discuss.php?d=449640"
}
]
}
GSD-2023-40318
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2023-40318",
"id": "GSD-2023-40318"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-40318"
],
"id": "GSD-2023-40318",
"modified": "2023-12-13T01:20:43.874302Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2023-40318",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
UBUNTU-CVE-2023-40318 (CVE-2023-40318)
Vulnerability from osv_ubuntu – Published: 2023-09-11 00:00 – Updated: 2026-09-23 15:45 – Source website
VLAI
Details
[Unknown description]
Severity
N/A (UNKNOWN)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "moodle",
"binary_version": "3.0.3+dfsg-0ubuntu1+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "moodle",
"purl": "pkg:deb/ubuntu/moodle@3.0.3+dfsg-0ubuntu1+esm1?arch=source\u0026distro=esm-apps-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.7.9+dfsg-1",
"2.7.10+dfsg-1",
"2.7.11+dfsg-1",
"2.7.11+dfsg-2",
"2.7.12+dfsg-1",
"3.0.3+dfsg-0ubuntu1",
"3.0.3+dfsg-0ubuntu1+esm1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "moodle",
"binary_version": "3.0.3+dfsg-0ubuntu1+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "moodle",
"purl": "pkg:deb/ubuntu/moodle@3.0.3+dfsg-0ubuntu1+esm1?arch=source\u0026distro=esm-apps/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.3+dfsg-0ubuntu1",
"3.0.3+dfsg-0ubuntu1+esm1"
]
}
],
"aliases": [],
"details": "[Unknown description]",
"id": "UBUNTU-CVE-2023-40318",
"modified": "2026-09-23T15:45:27Z",
"published": "2023-09-11T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-40318"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40318"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2023-40318"
]
}
WID-SEC-W-2023-2102
Vulnerability from csaf_certbund - Published: 2023-08-20 22:00 - Updated: 2023-08-20 22:00Summary
Moodle: Mehrere Schwachstellen
Severity
Hoch
Scope
15 vulnerabilities in this advisory, including CVE-2023-40318.
CVE-2023-40318