GHSA-7wmp-2xmx-g6h8

Moodle authorization headers preserved between "emulated redirects"

En bref

Publiée: 2024-11-11 15:31 UTC
Mise à jour: 2025-05-02 06:59 UTC
CVE: CVE-2024-43432
Alias: BIT-moodle-2024-43432
CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Description

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

Paquets affectés

Paquet	Versions
Packagist · moodle/moodle	introduced 4.4.0, fixed 4.4.2
Packagist · moodle/moodle	introduced 4.3.0, fixed 4.3.6
Packagist · moodle/moodle	introduced 4.2.0, fixed 4.2.9
Packagist · moodle/moodle	introduced 0, fixed 4.1.12

Références

https://nvd.nist.gov/vuln/detail/CVE-2024-43432 ADVISORY
https://bugzilla.redhat.com/show_bug.cgi?id=2304260 WEB
https://github.com/moodle/moodle PACKAGE
https://moodle.org/mod/forum/discuss.php?d=461200 WEB
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82136 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database