CVE-2023-40318
NoneCVSS
—
EPSS
—
Published
Sep 11, 2023
CISA due date
—
Cloudanix analysis
Unrated
SSVC: Track
There is not enough information available about this issue to understand what it affects or how serious it might be.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
Unknown due to missing description and affected products.
Why it matters to the business
No known business impact as details on products and exploitability are unavailable.
How an attack unfolds
No exploitation details available given unknown description and no KEV status or threat actors listed.
How to fix it
No fixed versions provided; monitor vendor advisories for updates.
How to confirm the fix worked
Verify exposure once product details and patches are published.
Typical attack path
- Insufficient data to define attack steps
How to detect it
No indicators available due to unknown description and no listed threat actors or campaigns.
What your security team should do
- Track official CVE updates for affected products and remediation versions
- Review internal asset inventory for any matches once disclosed
The record
[Unknown description]
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:18.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | moodle | 0 | No fix |
Related vulnerabilities
- CVE-2024-45691 Moodle Lesson activity password bypass through PHP loose comparison Also affects moodle
- CVE-2024-45689 Moodle allows users to retrieve information they did not have permission to access Also affects moodle
- CVE-2024-45690 Moodle IDOR when deleting OAuth2 linked accounts Also affects moodle
- CVE-2024-48899 Moodle IDOR when accessing list of course badges Also affects moodle
- CVE-2024-48897 moodle: IDOR in edit/delete RSS feed Also affects moodle
- CVE-2024-48898 moodle: Some users can delete audiences of other reports Also affects moodle
- CVE-2024-48896 Moodle leaks user names Also affects moodle
- CVE-2024-48901 moodle: IDOR when fetching report schedules Also affects moodle