A vulnerability classified as problematic was found in Moodle up to 2.3.3 (Learning Management Software). This vulnerability affects an unknown functionality in the library blog/rsslib.php. The manipulation with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. CVE summarizes:

blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed.

The weakness was disclosed 01/27/2013 (Website). The advisory is available at moodle.org. This vulnerability was named CVE-2012-6104 since 12/06/2012. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1592 by the MITRE ATT&CK project.

By approaching the search of inurl:blog/rsslib.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 2.2.3 eliminates this vulnerability.

The entries 63444, 63443, 63441 and 63440 are pretty similar.

Productinfo

Type

• Learning Management Software

Name

• Moodle

Version

• 2.2
• 2.2.1
• 2.2.2
• 2.2.3
• 2.2.4
• 2.2.5
• 2.2.6
• 2.3.1
• 2.3.2
• 2.3.3

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion