Vulnerabilities > CVE-2019-3809 - Server-Side Request Forgery (SSRF) vulnerability in Moodle

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

moodle

CWE-918

critical

nessus

NVD

Published: 2019-03-25

Updated: 2024-11-21

Summary

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page.

Vulnerable Configurations

Part	Description	Count
Application	Moodle Moodle Moodle 3.1.0 Moodle Moodle 3.1.1 Moodle Moodle 3.1.2 Moodle Moodle 3.1.3 Moodle Moodle 3.1.4 Moodle Moodle 3.1.5 Moodle Moodle 3.1.6 Moodle Moodle 3.1.7 Moodle Moodle 3.1.8 Moodle Moodle 3.1.9 Moodle Moodle 3.1.10 Moodle Moodle 3.1.11 Moodle Moodle 3.1.12 Moodle Moodle 3.1.13 Moodle Moodle 3.1.14 Moodle Moodle 3.1.15	20

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Nessus

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2019-D8EC88B21E.NASL
description	Multiple CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-03-18
modified	2019-01-31
plugin id	121492
published	2019-01-31
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121492
title	Fedora 29 : moodle (2019-d8ec88b21e)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2019-077CD6F168.NASL
description	Multiple CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-03-17
modified	2019-01-31
plugin id	121487
published	2019-01-31
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121487
title	Fedora 28 : moodle (2019-077cd6f168)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Nessus

References