CVE-2023-40321
NoneCVSS
—
EPSS
—
Published
Sep 11, 2023
CISA due date
—
Cloudanix analysis
Unrated
SSVC: Track
Without more details it is not possible to understand what this issue does or how serious it might be.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
Technical details of the flaw are unknown due to missing description.
Why it matters to the business
Operational consequences cannot be determined without additional information on affected products and exploitability.
How an attack unfolds
No exploitation method can be described given the absence of technical details and affected components.
How to fix it
Monitor vendor advisories for updates; apply any released fixes once identified.
How to confirm the fix worked
Review official sources for confirmation of patches or exposure once details emerge.
Typical attack path
- Insufficient data to outline attack steps
How to detect it
No specific logs or indicators can be identified from the available information.
What your security team should do
- Track CVE status for new information
- Maintain general patching hygiene
The record
[Unknown description]
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:18.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | moodle | 0 | No fix |
Related vulnerabilities
- CVE-2024-45691 Moodle Lesson activity password bypass through PHP loose comparison Also affects moodle
- CVE-2024-45689 Moodle allows users to retrieve information they did not have permission to access Also affects moodle
- CVE-2024-45690 Moodle IDOR when deleting OAuth2 linked accounts Also affects moodle
- CVE-2024-48899 Moodle IDOR when accessing list of course badges Also affects moodle
- CVE-2024-48897 moodle: IDOR in edit/delete RSS feed Also affects moodle
- CVE-2024-48898 moodle: Some users can delete audiences of other reports Also affects moodle
- CVE-2024-48896 Moodle leaks user names Also affects moodle
- CVE-2024-48901 moodle: IDOR when fetching report schedules Also affects moodle