← Back

CVE-2024-25979

nvd nist
Published: Feb 19, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

The URL parameters accepted by forum search were not limited to the allowed parameters.

Affected (4)

Moodle
1 product
Moodle
Fedoraproject
1 product
Fedora
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Moodle
From 4.1.0 to 4.1.9
Moodle
From 4.2.0 to 4.2.6
Moodle
From 4.3.0 to 4.3.3
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 38

Related CWEs

CWE-233
Improper Handling of Parameters
The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

References (8)

Source: patrick@puiterwijk.org
Patch
Source: patrick@puiterwijk.org
Issue Tracking
Source: patrick@puiterwijk.org
Mailing List
Source: patrick@puiterwijk.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.