CVE-2023-40324
NoneCVSS
—
EPSS
—
Published
Sep 11, 2023
CISA due date
—
Cloudanix analysis
Unrated
SSVC: Track
There is not enough information available about this issue to explain its effects.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
Insufficient information provided to determine technical impact.
Why it matters to the business
Unknown due to lack of details on affected products or severity.
How an attack unfolds
No information available on exploitation method; exploit maturity reported as none.
How to fix it
No fixed versions or remediation steps available.
How to confirm the fix worked
Unable to validate without details on the vulnerability or affected components.
How to detect it
No specific detection methods can be provided due to unknown details.
What your security team should do
- Monitor official sources for updates on this CVE as more information becomes available.
- Review internal inventories for any potential matches to the CVE identifier.
The record
[Unknown description]
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:18.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | moodle | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | moodle | 0 | No fix |
Related vulnerabilities
- CVE-2024-45691 Moodle Lesson activity password bypass through PHP loose comparison Also affects moodle
- CVE-2024-45689 Moodle allows users to retrieve information they did not have permission to access Also affects moodle
- CVE-2024-45690 Moodle IDOR when deleting OAuth2 linked accounts Also affects moodle
- CVE-2024-48899 Moodle IDOR when accessing list of course badges Also affects moodle
- CVE-2024-48897 moodle: IDOR in edit/delete RSS feed Also affects moodle
- CVE-2024-48898 moodle: Some users can delete audiences of other reports Also affects moodle
- CVE-2024-48896 Moodle leaks user names Also affects moodle
- CVE-2024-48901 moodle: IDOR when fetching report schedules Also affects moodle