Moodle Authentication Bypass in File Upload
Summary
CVE-2012-3387: Moodle Authentication Bypass in File Upload. Affects moodle/moodle versions >= 2.3, < 2.3.1. Fixed in 2.3.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning management system widely used for online education. It provides a platform for educators to create and manage courses, interact with students, and facilitate learning. The Moodle package in question is 'moodle/moodle' on Packagist. This vulnerability affects Moodle versions 2.3.x before 2.3.1. Moodle allows users to upload files, and this vulnerability specifically relates to the authentication bypass in the file upload functionality.
Vulnerability Detail
The vulnerability in Moodle 2.3.x before 2.3.1 arises from a lack of server-side validation for file upload references. The system relies solely on client-side checks to determine whether references are permitted in a file upload. This oversight enables remote authenticated users to bypass intended alias (shortcut) restrictions by omitting the client-side check. As a result, these users can upload files with aliases that should have been disallowed, potentially leading to unauthorized access or other security breaches.
How To Fix
Minimum fixed version
2.3.1
This is the first release that contains the fix.
composer require moodle/moodle:2.3.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, until the Moodle upgrade is performed, administrators can manually review and validate file uploads to ensure they comply with the intended alias restrictions. This can be done by inspecting the uploaded files and verifying that they do not contain any unauthorized aliases.
Conclusion
In conclusion, the Moodle Authentication Bypass in File Upload vulnerability allows remote authenticated users to bypass alias restrictions in file uploads. To mitigate this vulnerability, it is crucial to upgrade Moodle to version 2.3.1 or later. Administrators can also manually review and validate file uploads as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for moodle/moodle →
FAQ
Moodle is an open-source learning management system used for online education. It provides a platform for educators to create and manage courses, interact with students, and facilitate learning.
This vulnerability affects Moodle versions 2.3.x before 2.3.1.
The vulnerability allows remote authenticated users to bypass alias restrictions in file uploads, potentially leading to unauthorized access or other security breaches.
To fix this vulnerability, it is recommended to upgrade Moodle to version 2.3.1 or later.
Yes, administrators can manually review and validate file uploads until the Moodle upgrade is performed.
References
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
