CVE-2012-6112: PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
Summary
CVE-2012-6112: PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests. Affects moodle/moodle across 4 version ranges.
>= 2.1.0, < 2.1.10
>= 2.2.0, < 2.2.7
>= 2.3.0, < 2.3.4
>= 2.4.0, < 2.4.1
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Also tracked for
- wordpress · Debian:11
The same CVE-2012-6112 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The PHP Spellchecker addon for TinyMCE is a component used in various products, including Moodle. It provides spellchecking functionality using the Google Spellchecker service. The addon is integrated into Moodle versions 2.1.x to 2.4.x. This vulnerability affects the addon before version 2.0.6.1. The vulnerability arises from improper handling of control characters in the GoogleSpell.php file, allowing remote attackers to trigger arbitrary outbound HTTP requests by exploiting a crafted string.
Vulnerability Detail
The vulnerability in the PHP Spellchecker addon for TinyMCE allows attackers to manipulate the addon's functionality to send arbitrary outbound HTTP requests. By crafting a specific string, an attacker can trigger the addon to make requests to external servers, potentially leading to unauthorized access or data leakage. This vulnerability can be exploited remotely, posing a moderate risk to affected systems.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 2.1.0, < 2.1.102.1.10composer require moodle/moodle:2.1.10 -
>= 2.2.0, < 2.2.72.2.7composer require moodle/moodle:2.2.7 -
>= 2.3.0, < 2.3.42.3.4composer require moodle/moodle:2.3.4 -
>= 2.4.0, < 2.4.12.4.1composer require moodle/moodle:2.4.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is recommended to apply the fix by updating the PHP Spellchecker addon for TinyMCE to the latest version.
Conclusion
The PHP Spellchecker addon for TinyMCE is vulnerable to a remote code execution vulnerability that allows attackers to trigger arbitrary outbound HTTP requests. To mitigate this vulnerability, it is crucial to update the addon to version 2.0.6.1 or later. Users of Moodle should also ensure they are running the latest available version that includes the patched addon. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for moodle/moodle →
FAQ
The vulnerability allows attackers to trigger arbitrary outbound HTTP requests, which can potentially lead to unauthorized access or data leakage.
Yes, this vulnerability can be exploited remotely.
Moodle versions 2.1.x to 2.4.x are affected.
There are no known instances of this vulnerability being exploited at the moment.
Yes, updating the PHP Spellchecker addon for TinyMCE to version 2.0.6.1 or later fixes this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
