CVE-2024-34006 - Vulnerability Details - OpenCVE

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://moodle.org/mod/forum/discuss.php?d=458395

History

No history.

MITRE

Status: PUBLISHED

Assigner: fedora

Published: 2024-05-31T20:36:08.390Z

Updated: 2024-08-02T02:42:59.940Z

Reserved: 2024-04-29T13:02:30.267Z

Link: CVE-2024-34006

Vulnrichment

Updated: 2024-08-02T02:42:59.940Z

NVD

Status : Awaiting Analysis

Published: 2024-05-31T21:15:09.533

Modified: 2024-11-21T09:17:53.750

Link: CVE-2024-34006

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-34006", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "state": "PUBLISHED", "assignerShortName": "fedora", "dateReserved": "2024-04-29T13:02:30.267Z", "datePublished": "2024-05-31T20:36:08.390Z", "dateUpdated": "2024-08-02T02:42:59.940Z"}, "containers": {"cna": {"title": "moodle: unsanitized HTML in site log for config_log_created", "datePublic": "2024-05-20T09:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-838", "description": "CWE-838 Inappropriate Encoding for Output Context", "type": "CWE"}]}], "affected": [{"collectionURL": "https://git.moodle.org", "packageName": "Moodle", "versions": [{"status": "affected", "version": "4.0", "lessThanOrEqual": "4.3.3", "versionType": "semver"}, {"status": "affected", "version": "4.2", "lessThanOrEqual": "4.2.6", "versionType": "semver"}, {"status": "affected", "version": "4.1", "lessThanOrEqual": "4.1.9", "versionType": "semver"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<pre>The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.</pre><br>"}]}], "references": [{"url": "https://moodle.org/mod/forum/discuss.php?d=458395"}], "credits": [{"lang": "en", "value": "Leon Stringer", "type": "finder"}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-05-31T20:36:08.390Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-34006", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T15:10:13.250364Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*"], "vendor": "fedoraproject", "product": "fedora", "versions": [{"status": "affected", "version": "4.0", "versionType": "custom", "lessThanOrEqual": "4.3.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*"], "vendor": "fedoraproject", "product": "fedora", "versions": [{"status": "affected", "version": "4.1", "versionType": "custom", "lessThanOrEqual": "4.1.9"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*"], "vendor": "fedoraproject", "product": "fedora", "versions": [{"status": "affected", "version": "4.2", "versionType": "custom", "lessThanOrEqual": "4.2.6"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:42:30.475Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:42:59.940Z"}, "title": "CVE Program Container", "references": [{"url": "https://moodle.org/mod/forum/discuss.php?d=458395", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://moodle.org/mod/forum/discuss.php?d=458395", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:42:59.940Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-34006", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T15:10:13.250364Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*"], "vendor": "fedoraproject", "product": "fedora", "versions": [{"status": "affected", "version": "4.0", "versionType": "custom", "lessThanOrEqual": "4.3.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*"], "vendor": "fedoraproject", "product": "fedora", "versions": [{"status": "affected", "version": "4.1", "versionType": "custom", "lessThanOrEqual": "4.1.9"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*"], "vendor": "fedoraproject", "product": "fedora", "versions": [{"status": "affected", "version": "4.2", "versionType": "custom", "lessThanOrEqual": "4.2.6"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-03T15:18:08.058Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "moodle: unsanitized HTML in site log for config_log_created", "credits": [{"lang": "en", "type": "finder", "value": "Leon Stringer"}], "affected": [{"versions": [{"status": "affected", "version": "4.0", "versionType": "semver", "lessThanOrEqual": "4.3.3"}, {"status": "affected", "version": "4.2", "versionType": "semver", "lessThanOrEqual": "4.2.6"}, {"status": "affected", "version": "4.1", "versionType": "semver", "lessThanOrEqual": "4.1.9"}], "packageName": "Moodle", "collectionURL": "https://git.moodle.org", "defaultStatus": "unknown"}], "datePublic": "2024-05-20T09:00:00.000Z", "references": [{"url": "https://moodle.org/mod/forum/discuss.php?d=458395"}], "descriptions": [{"lang": "en", "value": "The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.", "supportingMedia": [{"type": "text/html", "value": "<pre>The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.</pre><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-838", "description": "CWE-838 Inappropriate Encoding for Output Context"}]}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-05-31T20:36:08.390Z"}}}, "cveMetadata": {"cveId": "CVE-2024-34006", "state": "PUBLISHED", "dateUpdated": "2024-08-02T02:42:59.940Z", "dateReserved": "2024-04-29T13:02:30.267Z", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "datePublished": "2024-05-31T20:36:08.390Z", "assignerShortName": "fedora"}, "dataVersion": "5.1"}