Bug 1392334 (CVE-2016-9186, CVE-2016-9187, CVE-2016-9188) - CVE-2016-9186 CVE-2016-9187 CVE-2016-9188 moodle: Multiple vulnerabilities in 3.1.2 and before
Summary: CVE-2016-9186 CVE-2016-9187 CVE-2016-9188 moodle: Multiple vulnerabilities in...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2016-9186, CVE-2016-9187, CVE-2016-9188
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1392335 1392336
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-07 09:06 UTC by Andrej Nemec
Modified: 2019-09-29 13:59 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-11-19 18:48:01 UTC
Embargoed:

Attachments (Terms of Use)

Description Andrej Nemec 2016-11-07 09:06:01 UTC 
Multiple security issues were reported in Moodle CMS and announced via CVENEW mail.

CVE-2016-9186:

Unrestricted file upload vulnerability in the "legacy course files" and
"file manager" modules in Moodle 3.1.2 allows remote authenticated
users to execute arbitrary code by uploading a file with an executable
extension, and then accessing it via unspecified vectors.

This one should be Windows specific.

CVE-2016-9187:

Unrestricted file upload vulnerability in the double extension support
in the "image" module in Moodle 3.1.2 allows remote authenticated users
to execute arbitrary code by uploading a file with an executable
extension, and then accessing it via unspecified vectors.

CVE-2016-9188:

Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before
3.1.2 allow remote attackers to inject arbitrary web script or HTML via
the s_additionalhtmlhead, s_additionalhtmltopofbody, and
s_additionalhtmlfooter parameters.

References:

https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html
Comment 1 Andrej Nemec 2016-11-07 09:08:28 UTC 
Created moodle tracking bugs for this issue:

Affects: fedora-all [bug 1392335]
Affects: epel-all [bug 1392336]
Comment 2 Igor Gnatenko 2016-11-19 18:48:01 UTC 
Sub-bugs are already on the way to repos.
Note You need to log in before you can comment on or make changes to this bug.