GitHub Advisoryadvisory · Packagist

GHSA-7wmp-2xmx-g6h8 Moodle authorization headers preserved between "emulated redirects"

LOW Published 2024-11-11 Modified 2024-11-12 Official page ↗
Aliases
CVE-2024-43432
Ecosystem
Packagist
Packages
moodle/moodle
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-319
Reviewed
2024-11-12

Affected packages

• Packagist moodle/moodle: >= 4.4.0, < 4.4.2 → fixed in 4.4.2 • Packagist moodle/moodle: >= 4.3.0, < 4.3.6 → fixed in 4.3.6 • Packagist moodle/moodle: >= 4.2.0, < 4.2.9 → fixed in 4.2.9 • Packagist moodle/moodle: < 4.1.12 → fixed in 4.1.12

Description

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

Related

Alias · CVE (1)

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References