netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-72gv-qqrp-h9qg
GHSA-72gv-qqrp-h9qg
This commit is contained in:
advisory-database[bot]
2024-01-12 16:12:11 +00:00
parent 2e8c406ed8
commit 0a52ee1d60
2 changed files with 120 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-72gv-qqrp-h9qg/GHSA-72gv-qqrp-h9qg.json
+120
View File
@@ -0,0 +1,120 @@
{
"schema_version": "1.4.0",
"id": "GHSA-72gv-qqrp-h9qg",
"modified": "2024-01-12T16:10:49Z",
"published": "2022-05-13T01:13:04Z",
"aliases": [
"CVE-2012-0797"
],
"summary": "Moodle Users Can Bypass Deleted Status",
"details": "The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.2"
},
{
"fixed": "2.2.1"
}
]
}
]
},
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.1"
},
{
"fixed": "2.1.4"
}
]
}
]
},
{
"package": {
"ecosystem": "Packagist",
"name": "moodle/moodle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0"
},
{
"fixed": "2.0.7"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0797"
},
{
"type": "WEB",
"url": "https://github.com/moodle/moodle/commit/364622b4662d9f349f3701ed548cda2f31491fea"
},
{
"type": "WEB",
"url": "https://github.com/moodle/moodle/commit/bbcde38b334ecbfa2a18b01b77a7e995b2c0d9f7"
},
{
"type": "WEB",
"url": "https://github.com/moodle/moodle/commit/dbfa519ad9e4d33ac3a4cd506d606d56a2f0bbff"
},
{
"type": "WEB",
"url": "https://github.com/moodle/moodle/commit/e922d9a90bab337b1082fbe28c352c18cae2580e"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=783532"
},
{
"type": "PACKAGE",
"url": "https://github.com/moodle/moodle"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28126"
},
{
"type": "WEB",
"url": "http://moodle.org/mod/forum/discuss.php?d=194016"
}
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-01-12T16:10:49Z",
"nvd_published_at": "2012-07-17T10:20:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-72gv-qqrp-h9qg/GHSA-72gv-qqrp-h9qg.json
-43
View File
@@ -1,43 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-72gv-qqrp-h9qg",
"modified": "2022-05-13T01:13:04Z",
"published": "2022-05-13T01:13:04Z",
"aliases": [
"CVE-2012-0797"
],
"details": "The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0797"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=783532"
},
{
"type": "WEB",
"url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28126"
},
{
"type": "WEB",
"url": "http://moodle.org/mod/forum/discuss.php?d=194016"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2012-07-17T10:20:00Z"
}
}