CVE-2024-38275 moodle: HTTP authorization header is preserved between "emulated redirects"

2024-06-1819:49:26

CWE-226

fedora

github.com

cve-2024

moodle

http authorization

curl

redirects

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

CNA Affected

[
  {
    "vendor": "Moodle",
    "product": "Moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.3",
        "versionType": "semver",
        "lessThanOrEqual": "4.3.4"
      },
      {
        "status": "affected",
        "version": "4.2",
        "versionType": "semver",
        "lessThanOrEqual": "4.2.7"
      },
      {
        "status": "affected",
        "version": "4.1",
        "versionType": "semver",
        "lessThanOrEqual": "4.1.10"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*"
    ],
    "vendor": "moodle",
    "product": "moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom",
        "lessThanOrEqual": "4.1.10"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:moodle:moodle:4.2.0:*:*:*:*:*:*:*"
    ],
    "vendor": "moodle",
    "product": "moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom",
        "lessThanOrEqual": "4.2.7"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:moodle:moodle:4.3.0:-:*:*:*:*:*:*"
    ],
    "vendor": "moodle",
    "product": "moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom",
        "lessThanOrEqual": "4.3.4"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:moodle:moodle:4.4.0:*:*:*:*:*:*:*"
    ],
    "vendor": "moodle",
    "product": "moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.4.0",
        "lessThan": "4.4.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]