ALT-PU-2020-3235

Критический

ALT-PU-2020-3235: package moodle update to version 3.10.0-alt1

Источник

errata.altlinux.org

Дата публикации

08.11.2020

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades moodle to version 3.10.0-alt1.

Устраненные уязвимости62

BDU:2022-04906

Высокий 7.2

Дата публикации: 10.08.2022

Уязвимость виртуальной обучающей среды moodle, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код и раскрыть защищаемую информацию

CVSS 3.1

Высокий 7.2

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

CVSS 2.0

Средний 6.4

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: None

Ссылки

BDU:2022-04906 https://bdu.fstec.ru/vul/2022-04906

Ссылки42

ALT-PU-2020-3235 https://errata.altlinux.org/ALT-PU-2020-3235

GHSA-243v-5pff-qqfj

https://github.com/advisories/GHSA-243v-5pff-qqfj

GHSA-26fg-v32r-h663

https://github.com/advisories/GHSA-26fg-v32r-h663

GHSA-28gc-4qq5-8q26

https://github.com/advisories/GHSA-28gc-4qq5-8q26

GHSA-2hmm-q272-xmhf

https://github.com/advisories/GHSA-2hmm-q272-xmhf

GHSA-32jc-9p58-p82x

https://github.com/advisories/GHSA-32jc-9p58-p82x

GHSA-385f-vgq7-8hhx

https://github.com/advisories/GHSA-385f-vgq7-8hhx

GHSA-3xxm-3g3c-w579

https://github.com/advisories/GHSA-3xxm-3g3c-w579

GHSA-49mv-vfcp-8gg9

https://github.com/advisories/GHSA-49mv-vfcp-8gg9

GHSA-56r9-72vx-q989

https://github.com/advisories/GHSA-56r9-72vx-q989

GHSA-5cvx-cwpx-9rjh

https://github.com/advisories/GHSA-5cvx-cwpx-9rjh

GHSA-62wh-m4jr-233r

https://github.com/advisories/GHSA-62wh-m4jr-233r

GHSA-6gx2-g773-hv9h

https://github.com/advisories/GHSA-6gx2-g773-hv9h

GHSA-72w2-j52c-7682

https://github.com/advisories/GHSA-72w2-j52c-7682

GHSA-77jm-f3vj-xvx2

https://github.com/advisories/GHSA-77jm-f3vj-xvx2

GHSA-7h8v-2v8x-h264

https://github.com/advisories/GHSA-7h8v-2v8x-h264

GHSA-7mmc-22g7-3xq2

https://github.com/advisories/GHSA-7mmc-22g7-3xq2

GHSA-8v23-w4w5-w83c

https://github.com/advisories/GHSA-8v23-w4w5-w83c

GHSA-948f-j464-rfj2

https://github.com/advisories/GHSA-948f-j464-rfj2

GHSA-97qf-pq7x-964m

https://github.com/advisories/GHSA-97qf-pq7x-964m

GHSA-9f45-9qrw-pp4v

https://github.com/advisories/GHSA-9f45-9qrw-pp4v

GHSA-9gqp-3g28-w9xc

https://github.com/advisories/GHSA-9gqp-3g28-w9xc

GHSA-c7v4-m269-4995

https://github.com/advisories/GHSA-c7v4-m269-4995

GHSA-c9hq-g4q8-w893

https://github.com/advisories/GHSA-c9hq-g4q8-w893

GHSA-cwh2-q44x-5w3c

https://github.com/advisories/GHSA-cwh2-q44x-5w3c

GHSA-fm5h-58g2-4m3f

https://github.com/advisories/GHSA-fm5h-58g2-4m3f

GHSA-h77r-rp97-7rv4

https://github.com/advisories/GHSA-h77r-rp97-7rv4

GHSA-j5xf-gv89-g422

https://github.com/advisories/GHSA-j5xf-gv89-g422

GHSA-jqgr-gh62-jf53

https://github.com/advisories/GHSA-jqgr-gh62-jf53

GHSA-jr83-8x65-xcr5

https://github.com/advisories/GHSA-jr83-8x65-xcr5

GHSA-mqw9-3cjm-xwp3

https://github.com/advisories/GHSA-mqw9-3cjm-xwp3

GHSA-pgcp-m69h-p2gr

https://github.com/advisories/GHSA-pgcp-m69h-p2gr

GHSA-pgm5-cr62-prxq

https://github.com/advisories/GHSA-pgm5-cr62-prxq

GHSA-prjm-2fj2-787f

https://github.com/advisories/GHSA-prjm-2fj2-787f

GHSA-q2x3-2f9g-h559

https://github.com/advisories/GHSA-q2x3-2f9g-h559

GHSA-vj5p-fp42-774p

https://github.com/advisories/GHSA-vj5p-fp42-774p

GHSA-vxhx-gmhm-623c

https://github.com/advisories/GHSA-vxhx-gmhm-623c

GHSA-w8x2-w4qr-v3x4

https://github.com/advisories/GHSA-w8x2-w4qr-v3x4

GHSA-wwv7-h477-wrv7

https://github.com/advisories/GHSA-wwv7-h477-wrv7

GHSA-xp2f-9mx3-3c6p

https://github.com/advisories/GHSA-xp2f-9mx3-3c6p

GHSA-xqcf-vgqc-pcmg

https://github.com/advisories/GHSA-xqcf-vgqc-pcmg

GHSA-xxp4-mf4h-6cwm

https://github.com/advisories/GHSA-xxp4-mf4h-6cwm

Связанные уязвимости

CVE-2020-25698

CVSS3: 7.5

ubuntu

почти 6 лет назад

Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

CVE-2020-25698

CVSS3: 7.5

nvd

почти 6 лет назад

CVE-2020-25698

CVSS3: 7.5

debian

почти 6 лет назад

Users' enrollment capabilities were not being sufficiently checked in ...

GHSA-vxhx-gmhm-623c

CVSS3: 7.5

github

больше 5 лет назад

Improper Access Control in moodle

CVE-2020-25699

CVSS3: 7.5

ubuntu

почти 6 лет назад

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.