CVE-2012-0797: Moodle Users Can Bypass Deleted Status
Summary
CVE-2012-0797: Moodle Users Can Bypass Deleted Status. Affects moodle/moodle across 3 version ranges.
>= 2.0, < 2.0.7
>= 2.1, < 2.1.4
>= 2.2, < 2.2.1
Fixed in 2.0.7, 2.1.4 or 2.2.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning management system (LMS) used by educational institutions worldwide. It provides a platform for creating and managing online courses, allowing educators to deliver content, interact with students, and track their progress. Moodle is written in PHP and offers various features such as forums, quizzes, assignments, and user management. However, a vulnerability has been discovered in Moodle versions 2.0.x, 2.1.x, and 2.2.x that allows remote authenticated users to bypass the deleted status and continue using a server via a token.
Vulnerability Detail
The vulnerability in Moodle's webservices functionality allows authenticated users to bypass the deleted status and retain access to the server through a token. This means that even if a user account has been marked as deleted, they can still use the server's resources and perform actions as if they were an active user. This can lead to unauthorized access, data leakage, and potential misuse of the system. The vulnerability has a moderate severity rating and is identified by the Common Weakness Enumeration (CWE) ID 287.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 2.0, < 2.0.72.0.7composer require moodle/moodle:2.0.7 -
>= 2.1, < 2.1.42.1.4composer require moodle/moodle:2.1.4 -
>= 2.2, < 2.2.12.2.1composer require moodle/moodle:2.2.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the available patches or upgrade to the fixed versions of Moodle.
Conclusion
The discovered vulnerability in Moodle allows authenticated users to bypass the deleted status and retain access to the server. To mitigate this risk, it is crucial to upgrade to the patched versions of Moodle or apply the available security patches. Regularly updating Moodle installations is essential to ensure the security and integrity of the system. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for moodle/moodle →
FAQ
Moodle is an open-source learning management system (LMS) used by educational institutions to create and manage online courses.
The vulnerability allows authenticated users to bypass the deleted status and continue using the server, potentially leading to unauthorized access and misuse of the system.
To fix the vulnerability, it is recommended to upgrade to the patched versions of Moodle (2.2.1, 2.1.4, or 2.0.7).
There is no specific workaround mentioned. Applying the available patches or upgrading to the fixed versions is the recommended solution.
The vulnerability has a moderate severity rating.
References
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
