Staging Environment: Content and features may be unstable or change without notice.
Advisory details: vulnrichment / CVE-2023-23923
Advisory ID vulnrichment/CVE-2023-23923
Aliases
Summary The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-284 Improper Access Control
System Score Found at
ssvc Track
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76862
https://bugzilla.redhat.com/show_bug.cgi?id=2162549
https://moodle.org/mod/forum/discuss.php?d=443274#p1782023
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-19T18:21:47Z/ Found at None

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-19T18:21:47Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2023/23xxx/CVE-2023-23923.json

Source Advisory: vulnrichment/CVE-2023-23923

View SSVC decision tree 
[{'Exploitation': 'none'},
 {'Automatable': 'yes'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]