CVE-2024-43440 - Vulnerability Details

Vendors	Products
Moodle	Moodle

Link	Providers
https://bugzilla.redhat.com/show_bug.cgi?id=2304269
https://moodle.org/mod/forum/discuss.php?d=461210
https://nvd.nist.gov/vuln/detail/CVE-2024-43440
https://www.cve.org/CVERecord?id=CVE-2024-43440

Type	Values Removed	Values Added
First Time appeared		Moodle Moodle moodle
Weaknesses		CWE-22
CPEs		cpe:2.3:a:moodle:moodle::::::::
Vendors & Products		Moodle Moodle moodle
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Title	moodle: LFI vulnerability when restoring malformed block backups	Moodle: lfi vulnerability when restoring malformed block backups
References		https://bugzilla.redhat.com/show_bug.cgi?id=2304269

Type	Values Removed	Values Added
Description	No description is available for this CVE.	A flaw was found in moodle. A local file may include risks when restoring block backups.

Type	Values Removed	Values Added
Description		No description is available for this CVE.
Title		moodle: LFI vulnerability when restoring malformed block backups
References		https://moodle.org/mod/forum/discuss.php?d=461210 https://nvd.nist.gov/vuln/detail/CVE-2024-43440 https://www.cve.org/CVERecord?id=CVE-2024-43440
Metrics	threat_severity `None`	cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` threat_severity `Important`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-43440", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "state": "PUBLISHED", "assignerShortName": "fedora", "dateReserved": "2024-08-13T07:15:00.599Z", "datePublished": "2024-11-07T13:32:16.113Z", "dateUpdated": "2024-11-07T14:38:59.743Z"}, "containers": {"cna": {"title": "Moodle: lfi vulnerability when restoring malformed block backups", "metrics": [{"other": {"content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in moodle. A local file may include risks when restoring block backups."}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "4.1.12", "versionType": "semver"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.9", "versionType": "semver"}, {"status": "affected", "version": "4.3", "lessThan": "4.3.6", "versionType": "semver"}, {"status": "affected", "version": "4.4", "lessThan": "4.4.2", "versionType": "semver"}], "packageName": "moodle", "collectionURL": "https://github.com/moodle/moodle", "defaultStatus": "unaffected"}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304269", "name": "RHBZ#2304269", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://moodle.org/mod/forum/discuss.php?d=461210"}], "datePublic": "2024-08-19T04:00:00+00:00", "timeline": [{"lang": "en", "time": "2024-08-12T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-08-19T04:00:00+00:00", "value": "Made public."}], "credits": [{"lang": "en", "value": "Red Hat would like to thank Paul Holden for reporting this issue."}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-11-07T13:32:16.113Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "affected": [{"vendor": "moodle", "product": "moodle", "cpes": ["cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.1.12", "versionType": "semver"}, {"version": "4.2", "status": "affected", "lessThan": "4.2.9", "versionType": "semver"}, {"version": "4.3", "status": "affected", "lessThan": "4.3.6", "versionType": "semver"}, {"version": "4.4", "status": "affected", "lessThan": "4.4.2", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-07T14:23:21.250549Z", "id": "CVE-2024-43440", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-07T14:38:59.743Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-43440 (string)

assignerOrgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

state : PUBLISHED (string)

assignerShortName : fedora (string)

dateReserved : 2024-08-13T07:15:00.599Z (string)

datePublished : 2024-11-07T13:32:16.113Z (string)

dateUpdated : 2024-11-07T14:38:59.743Z (string)

}

containers : { »

cna : { »

title : Moodle: lfi vulnerability when restoring malformed block backups (string)

metrics : [ »

0 : { »

other : { »

content : { »

value : Important (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

type : Red Hat severity rating (string)

}

1 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in moodle. A local file may include risks when restoring block backups. (string)

}

]

affected : [ »

0 : { »

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 4.3 (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 4.4 (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

packageName : moodle (string)

collectionURL : https://github.com/moodle/moodle (string)

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2304269 (string)

name : RHBZ#2304269 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://moodle.org/mod/forum/discuss.php?d=461210 (string)

}

]

datePublic : 2024-08-19T04:00:00+00:00 (string)

timeline : [ »

0 : { »

lang : en (string)

time : 2024-08-12T00:00:00+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2024-08-19T04:00:00+00:00 (string)

value : Made public. (string)

}

]

credits : [ »

0 : { »

lang : en (string)

value : Red Hat would like to thank Paul Holden for reporting this issue. (string)

}

]

providerMetadata : { »

orgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

shortName : fedora (string)

dateUpdated : 2024-11-07T13:32:16.113Z (string)

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-22 (string)

lang : en (string)

description : CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (string)

}

]

}

]

affected : [ »

0 : { »

vendor : moodle (string)

product : moodle (string)

cpes : [ »

0 : cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

version : 4.2 (string)

status : affected (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

version : 4.3 (string)

status : affected (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

version : 4.4 (string)

status : affected (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-07T14:23:21.250549Z (string)

id : CVE-2024-43440 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-07T14:38:59.743Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-43440", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-07T14:23:21.250549Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*"], "vendor": "moodle", "product": "moodle", "versions": [{"status": "affected", "version": "0", "lessThan": "4.1.12", "versionType": "semver"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.9", "versionType": "semver"}, {"status": "affected", "version": "4.3", "lessThan": "4.3.6", "versionType": "semver"}, {"status": "affected", "version": "4.4", "lessThan": "4.4.2", "versionType": "semver"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-07T14:38:53.221Z"}}], "cna": {"title": "Moodle: lfi vulnerability when restoring malformed block backups", "credits": [{"lang": "en", "value": "Red Hat would like to thank Paul Holden for reporting this issue."}], "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "4.1.12", "versionType": "semver"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.9", "versionType": "semver"}, {"status": "affected", "version": "4.3", "lessThan": "4.3.6", "versionType": "semver"}, {"status": "affected", "version": "4.4", "lessThan": "4.4.2", "versionType": "semver"}], "packageName": "moodle", "collectionURL": "https://github.com/moodle/moodle", "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2024-08-12T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-08-19T04:00:00+00:00", "value": "Made public."}], "datePublic": "2024-08-19T04:00:00+00:00", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304269", "name": "RHBZ#2304269", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://moodle.org/mod/forum/discuss.php?d=461210"}], "descriptions": [{"lang": "en", "value": "A flaw was found in moodle. A local file may include risks when restoring block backups."}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-11-07T13:32:16.113Z"}}}, "cveMetadata": {"cveId": "CVE-2024-43440", "state": "PUBLISHED", "dateUpdated": "2024-11-07T14:38:59.743Z", "dateReserved": "2024-08-13T07:15:00.599Z", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "datePublished": "2024-11-07T13:32:16.113Z", "assignerShortName": "fedora"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-43440 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-11-07T14:23:21.250549Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* (string)

]

vendor : moodle (string)

product : moodle (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 4.3 (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 4.4 (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

defaultStatus : unknown (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-22 (string)

description : CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-07T14:38:53.221Z (string)

}

]

cna : { »

title : Moodle: lfi vulnerability when restoring malformed block backups (string)

credits : [ »

0 : { »

lang : en (string)

value : Red Hat would like to thank Paul Holden for reporting this issue. (string)

}

]

metrics : [ »

0 : { »

other : { »

type : Red Hat severity rating (string)

content : { »

value : Important (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

1 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.5 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.1.12 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.9 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 4.3 (string)

lessThan : 4.3.6 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 4.4 (string)

lessThan : 4.4.2 (string)

versionType : semver (string)

}

]

packageName : moodle (string)

collectionURL : https://github.com/moodle/moodle (string)

defaultStatus : unaffected (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2024-08-12T00:00:00+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2024-08-19T04:00:00+00:00 (string)

value : Made public. (string)

}

]

datePublic : 2024-08-19T04:00:00+00:00 (string)

references : [ »

0 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2304269 (string)

name : RHBZ#2304269 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://moodle.org/mod/forum/discuss.php?d=461210 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in moodle. A local file may include risks when restoring block backups. (string)

}

]

providerMetadata : { »

orgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

shortName : fedora (string)

dateUpdated : 2024-11-07T13:32:16.113Z (string)

}

cveMetadata : { »

cveId : CVE-2024-43440 (string)

state : PUBLISHED (string)

dateUpdated : 2024-11-07T14:38:59.743Z (string)

dateReserved : 2024-08-13T07:15:00.599Z (string)

assignerOrgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

datePublished : 2024-11-07T13:32:16.113Z (string)

assignerShortName : fedora (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in moodle. A local file may include risks when restoring block backups."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en Moodle. Un archivo local puede incluir riesgos al restaurar copias de seguridad de bloques."}], "id": "CVE-2024-43440", "lastModified": "2024-11-08T19:01:03.880", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "patrick@puiterwijk.org", "type": "Secondary"}]}, "published": "2024-11-07T14:15:16.610", "references": [{"source": "patrick@puiterwijk.org", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304269"}, {"source": "patrick@puiterwijk.org", "url": "https://moodle.org/mod/forum/discuss.php?d=461210"}], "sourceIdentifier": "patrick@puiterwijk.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in moodle. A local file may include risks when restoring block backups. (string)

}

1 : { »

lang : es (string)

value : Se encontró una falla en Moodle. Un archivo local puede incluir riesgos al restaurar copias de seguridad de bloques. (string)

}

]

id : CVE-2024-43440 (string)

lastModified : 2024-11-08T19:01:03.880 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : patrick@puiterwijk.org (string)

type : Secondary (string)

}

]

}

published : 2024-11-07T14:15:16.610 (string)

references : [ »

0 : { »

source : patrick@puiterwijk.org (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2304269 (string)

}

1 : { »

source : patrick@puiterwijk.org (string)

url : https://moodle.org/mod/forum/discuss.php?d=461210 (string)

}

]

sourceIdentifier : patrick@puiterwijk.org (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-22 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"acknowledgement": "Red Hat would like to thank Paul Holden for reporting this issue.", "bugzilla": {"description": "moodle: LFI vulnerability when restoring malformed block backups", "id": "2304269", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304269"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "details": ["A flaw was found in moodle. A local file may include risks when restoring block backups."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2024-43440", "public_date": "2024-08-19T04:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-43440\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-43440\nhttps://moodle.org/mod/forum/discuss.php?d=461210"], "statement": "This flaw only affects community components not shipped in Red Hat products.", "threat_severity": "Important"}

{

acknowledgement : Red Hat would like to thank Paul Holden for reporting this issue. (string)

bugzilla : { »

description : moodle: LFI vulnerability when restoring malformed block backups (string)

id : 2304269 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2304269 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

status : draft (string)

}

details : [ »

0 : A flaw was found in moodle. A local file may include risks when restoring block backups. (string)

]

mitigation : { »

lang : en:us (string)

value : Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. (string)

}

name : CVE-2024-43440 (string)

public_date : 2024-08-19T04:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2024-43440 https://nvd.nist.gov/vuln/detail/CVE-2024-43440 https://moodle.org/mod/forum/discuss.php?d=461210 (string)

]

statement : This flaw only affects community components not shipped in Red Hat products. (string)

threat_severity : Important (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object