GHSA-h9w8-4376-j344

Source

https://github.com/advisories/GHSA-h9w8-4376-j344

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-h9w8-4376-j344/GHSA-h9w8-4376-j344.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-h9w8-4376-j344

Aliases

CVE-2006-4936

Published

2022-05-01T07:23:24Z

Modified

2024-02-12T16:56:53Z

Summary

Moodle does not properly validate module instance id

Details

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

Database specific

{
    "cwe_ids":  [
        "CWE-20"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-02-12T16:29:26Z",
    "nvd_published_at":  "2006-09-23T00:07:00Z",
    "severity":  "MODERATE"
}

References

Affected packages

Packagist / moodle/moodle

Package

Name: moodle/moodle
Purl: pkg:composer/moodle/moodle

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.6.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-h9w8-4376-j344/GHSA-h9w8-4376-j344.json"