CVE Vulnerabilities

CVE-2018-1043

Published: Jan 22, 2018 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 3.2.0 (including) 3.2.0 (including)
Moodle Moodle 3.2.1 (including) 3.2.1 (including)
Moodle Moodle 3.2.2 (including) 3.2.2 (including)
Moodle Moodle 3.2.3 (including) 3.2.3 (including)
Moodle Moodle 3.2.4 (including) 3.2.4 (including)
Moodle Moodle 3.2.5 (including) 3.2.5 (including)
Moodle Moodle 3.2.6 (including) 3.2.6 (including)
Moodle Moodle 3.3.0 (including) 3.3.0 (including)
Moodle Moodle 3.3.1 (including) 3.3.1 (including)
Moodle Moodle 3.3.2 (including) 3.3.2 (including)
Moodle Moodle 3.3.3 (including) 3.3.3 (including)
Moodle Moodle 3.4.0 (including) 3.4.0 (including)

References