CVE-2023-40317
NoneCVSS
—
EPSS
—
Published
Sep 11, 2023
CISA due date
—
Cloudanix analysis
A security issue with no available details has been known for years but shows no signs of being used by attackers.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
The specific technical impact cannot be determined because the vulnerability description is unknown.
Why it matters to the business
Operational consequences cannot be assessed without details on affected products or the flaw itself; the issue has been public for over three years with no known exploitation.
How an attack unfolds
No exploitation path is known; the vulnerability has unknown description, no listed affected products, and exploit maturity listed as none.
How to fix it
No fixed versions are provided; apply vendor updates when released and monitor official advisories for this CVE.
How to confirm the fix worked
Re-evaluate the CVE record when a description or affected products become available to confirm exposure or remediation status.
How to detect it
No indicators can be derived due to unknown description and lack of exploitation evidence.
What your security team should do
- Track the CVE for updated details from the assigning authority
- Include the identifier in vulnerability scanning policies once more information is released
- Review asset inventory for any potential matches to the CVE title once products are identified
The record
[Unknown description]
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:18.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | moodle | 0 | No fix |
Related vulnerabilities
- CVE-2024-45691 Moodle Lesson activity password bypass through PHP loose comparison Also affects moodle
- CVE-2024-45689 Moodle allows users to retrieve information they did not have permission to access Also affects moodle
- CVE-2024-45690 Moodle IDOR when deleting OAuth2 linked accounts Also affects moodle
- CVE-2024-48899 Moodle IDOR when accessing list of course badges Also affects moodle
- CVE-2024-48897 moodle: IDOR in edit/delete RSS feed Also affects moodle
- CVE-2024-48898 moodle: Some users can delete audiences of other reports Also affects moodle
- CVE-2024-48896 Moodle leaks user names Also affects moodle
- CVE-2024-48901 moodle: IDOR when fetching report schedules Also affects moodle