CVE-2024-43432 - Vulnerability Details

Vendors	Products
Moodle	Moodle

Link	Providers
https://bugzilla.redhat.com/show_bug.cgi?id=2304260
https://moodle.org/mod/forum/discuss.php?d=461200

Type	Values Removed	Values Added
First Time appeared		Moodle Moodle moodle
Weaknesses		CWE-319
CPEs		cpe:2.3:a:moodle:moodle::::::::
Vendors & Products		Moodle Moodle moodle
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
Title		Moodle: authorization headers preserved between "emulated redirects"
References		https://bugzilla.redhat.com/show_bug.cgi?id=2304260 https://moodle.org/mod/forum/discuss.php?d=461200
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-43432", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "state": "PUBLISHED", "assignerShortName": "fedora", "dateReserved": "2024-08-13T07:15:00.598Z", "datePublished": "2024-11-11T12:16:04.901Z", "dateUpdated": "2024-11-12T15:14:27.618Z"}, "containers": {"cna": {"title": "Moodle: authorization headers preserved between \"emulated redirects\"", "metrics": [{"other": {"content": {"value": "Low", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs."}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "4.1.12", "versionType": "semver"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.9", "versionType": "semver"}, {"status": "affected", "version": "4.3", "lessThan": "4.3.6", "versionType": "semver"}, {"status": "affected", "version": "4.4", "lessThan": "4.4.2", "versionType": "semver"}], "packageName": "moodle", "collectionURL": "https://github.com/moodle/moodle", "defaultStatus": "unaffected"}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304260", "name": "RHBZ#2304260", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://moodle.org/mod/forum/discuss.php?d=461200"}], "datePublic": "2024-08-19T04:00:00+00:00", "timeline": [{"lang": "en", "time": "2024-08-12T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-08-19T04:00:00+00:00", "value": "Made public."}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-11-11T12:16:04.901Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-319", "lang": "en", "description": "CWE-319 Cleartext Transmission of Sensitive Information"}]}], "affected": [{"vendor": "moodle", "product": "moodle", "cpes": ["cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "4.1.12", "versionType": "semver"}, {"version": "4.2", "status": "affected", "lessThan": "4.2.9", "versionType": "semver"}, {"version": "4.3", "status": "affected", "lessThan": "4.3.6", "versionType": "semver"}, {"version": "4.4", "status": "affected", "lessThan": "4.4.2", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-12T15:06:57.126320Z", "id": "CVE-2024-43432", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-12T15:14:27.618Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-43432 (string)

assignerOrgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

state : PUBLISHED (string)

assignerShortName : fedora (string)

dateReserved : 2024-08-13T07:15:00.598Z (string)

datePublished : 2024-11-11T12:16:04.901Z (string)

dateUpdated : 2024-11-12T15:14:27.618Z (string)

}

containers : { »

cna : { »

title : Moodle: authorization headers preserved between "emulated redirects" (string)

metrics : [ »

0 : { »

other : { »

content : { »

value : Low (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

type : Red Hat severity rating (string)

}

1 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs. (string)

}

]

affected : [ »

0 : { »

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 4.3 (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 4.4 (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

packageName : moodle (string)

collectionURL : https://github.com/moodle/moodle (string)

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2304260 (string)

name : RHBZ#2304260 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://moodle.org/mod/forum/discuss.php?d=461200 (string)

}

]

datePublic : 2024-08-19T04:00:00+00:00 (string)

timeline : [ »

0 : { »

lang : en (string)

time : 2024-08-12T00:00:00+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2024-08-19T04:00:00+00:00 (string)

value : Made public. (string)

}

]

providerMetadata : { »

orgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

shortName : fedora (string)

dateUpdated : 2024-11-11T12:16:04.901Z (string)

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-319 (string)

lang : en (string)

description : CWE-319 Cleartext Transmission of Sensitive Information (string)

}

]

}

]

affected : [ »

0 : { »

vendor : moodle (string)

product : moodle (string)

cpes : [ »

0 : cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

version : 4.2 (string)

status : affected (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

version : 4.3 (string)

status : affected (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

version : 4.4 (string)

status : affected (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-12T15:06:57.126320Z (string)

id : CVE-2024-43432 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-12T15:14:27.618Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-43432", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-12T15:06:57.126320Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*"], "vendor": "moodle", "product": "moodle", "versions": [{"status": "affected", "version": "0", "lessThan": "4.1.12", "versionType": "semver"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.9", "versionType": "semver"}, {"status": "affected", "version": "4.3", "lessThan": "4.3.6", "versionType": "semver"}, {"status": "affected", "version": "4.4", "lessThan": "4.4.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-12T15:14:20.432Z"}}], "cna": {"title": "Moodle: authorization headers preserved between \"emulated redirects\"", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Low", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "4.1.12", "versionType": "semver"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.9", "versionType": "semver"}, {"status": "affected", "version": "4.3", "lessThan": "4.3.6", "versionType": "semver"}, {"status": "affected", "version": "4.4", "lessThan": "4.4.2", "versionType": "semver"}], "packageName": "moodle", "collectionURL": "https://github.com/moodle/moodle", "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2024-08-12T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-08-19T04:00:00+00:00", "value": "Made public."}], "datePublic": "2024-08-19T04:00:00+00:00", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304260", "name": "RHBZ#2304260", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://moodle.org/mod/forum/discuss.php?d=461200"}], "descriptions": [{"lang": "en", "value": "A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs."}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-11-11T12:16:04.901Z"}}}, "cveMetadata": {"cveId": "CVE-2024-43432", "state": "PUBLISHED", "dateUpdated": "2024-11-12T15:14:27.618Z", "dateReserved": "2024-08-13T07:15:00.598Z", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "datePublished": "2024-11-11T12:16:04.901Z", "assignerShortName": "fedora"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-43432 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-11-12T15:06:57.126320Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* (string)

]

vendor : moodle (string)

product : moodle (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 4.3 (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 4.4 (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

defaultStatus : unaffected (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-319 (string)

description : CWE-319 Cleartext Transmission of Sensitive Information (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-12T15:14:20.432Z (string)

}

]

cna : { »

title : Moodle: authorization headers preserved between "emulated redirects" (string)

metrics : [ »

0 : { »

other : { »

type : Red Hat severity rating (string)

content : { »

value : Low (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

1 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

]

affected : [ »

0 : { »

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 4.3 (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 4.4 (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

packageName : moodle (string)

collectionURL : https://github.com/moodle/moodle (string)

defaultStatus : unaffected (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2024-08-12T00:00:00+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2024-08-19T04:00:00+00:00 (string)

value : Made public. (string)

}

]

datePublic : 2024-08-19T04:00:00+00:00 (string)

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2304260 (string)

name : RHBZ#2304260 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://moodle.org/mod/forum/discuss.php?d=461200 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs. (string)

}

]

providerMetadata : { »

orgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

shortName : fedora (string)

dateUpdated : 2024-11-11T12:16:04.901Z (string)

}

cveMetadata : { »

cveId : CVE-2024-43432 (string)

state : PUBLISHED (string)

dateUpdated : 2024-11-12T15:14:27.618Z (string)

dateReserved : 2024-08-13T07:15:00.598Z (string)

assignerOrgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

datePublished : 2024-11-11T12:16:04.901Z (string)

assignerShortName : fedora (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en Moodle. El contenedor cURL en Moodle elimina los encabezados HTTPAUTH y USERPWD durante las redirecciones emuladas, pero conserva otros encabezados de solicitud originales, por lo que la informaci\u00f3n del encabezado de autorizaci\u00f3n HTTP podr\u00eda enviarse involuntariamente en solicitudes para redireccionar URL."}], "id": "CVE-2024-43432", "lastModified": "2024-11-12T16:35:17.560", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "patrick@puiterwijk.org", "type": "Secondary"}]}, "published": "2024-11-11T13:15:04.233", "references": [{"source": "patrick@puiterwijk.org", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304260"}, {"source": "patrick@puiterwijk.org", "url": "https://moodle.org/mod/forum/discuss.php?d=461200"}], "sourceIdentifier": "patrick@puiterwijk.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs. (string)

}

1 : { »

lang : es (string)

value : Se encontró una falla en Moodle. El contenedor cURL en Moodle elimina los encabezados HTTPAUTH y USERPWD durante las redirecciones emuladas, pero conserva otros encabezados de solicitud originales, por lo que la información del encabezado de autorización HTTP podría enviarse involuntariamente en solicitudes para redireccionar URL. (string)

}

]

id : CVE-2024-43432 (string)

lastModified : 2024-11-12T16:35:17.560 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : patrick@puiterwijk.org (string)

type : Secondary (string)

}

]

}

published : 2024-11-11T13:15:04.233 (string)

references : [ »

0 : { »

source : patrick@puiterwijk.org (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2304260 (string)

}

1 : { »

source : patrick@puiterwijk.org (string)

url : https://moodle.org/mod/forum/discuss.php?d=461200 (string)

}

]

sourceIdentifier : patrick@puiterwijk.org (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-319 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object