CVE-2023-40319
NoneCVSS
—
EPSS
—
Published
Sep 11, 2023
CISA due date
—
Cloudanix analysis
A software issue from 2023 lacks enough public details to understand its effects or risks.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
Insufficient information available; no description or affected components provided to determine technical effects.
Why it matters to the business
Unknown exposure and risk; 1131 days since publication with no known exploit maturity increases uncertainty for organizations relying on the affected ecosystem.
How an attack unfolds
No exploitation details derivable due to unknown description and no associated threat actors or campaigns.
How to fix it
No fixed versions available; monitor vendor advisories for updates once details are published.
How to confirm the fix worked
Unable to validate exposure or fixes without product or version information.
How to detect it
No log sources or artifacts identifiable without description or affected products.
What your security team should do
- Track CVE for updated details and affected products
- Review internal inventory for any potential matches once data is released
The record
[Unknown description]
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:18.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | moodle | 0 | No fix |
Related vulnerabilities
- CVE-2024-45691 Moodle Lesson activity password bypass through PHP loose comparison Also affects moodle
- CVE-2024-45689 Moodle allows users to retrieve information they did not have permission to access Also affects moodle
- CVE-2024-45690 Moodle IDOR when deleting OAuth2 linked accounts Also affects moodle
- CVE-2024-48899 Moodle IDOR when accessing list of course badges Also affects moodle
- CVE-2024-48897 moodle: IDOR in edit/delete RSS feed Also affects moodle
- CVE-2024-48898 moodle: Some users can delete audiences of other reports Also affects moodle
- CVE-2024-48896 Moodle leaks user names Also affects moodle
- CVE-2024-48901 moodle: IDOR when fetching report schedules Also affects moodle