Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-35133

An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

Published

2023-06-22T21:15:09.520

Last Modified

2024-11-21T08:08:00.163

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-918
  • Type: Primary
    CWE-918
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 3.9.22 Yes
Application moodle moodle < 3.11.15 Yes
Application moodle moodle < 4.0.9 Yes
Application moodle moodle < 4.1.4 Yes
Application moodle moodle 4.2.0 Yes
References