An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login feature. A remote attacker can create a link that leads to a trusted website, however, when clicked, it redirects the victims to arbitrary URL/domain. Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile     auto-login feature. A remote attacker can create a link that leads to a trusted website, however, when     clicked, it redirects the victims to arbitrary URL/domain. Successful exploitation of this vulnerability     may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.
    (CVE-2022-35652)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile
    auto-login feature. A remote attacker can create a link that leads to a trusted website, however, when
    clicked, it redirects the victims to arbitrary URL/domain. Successful exploitation of this vulnerability
    may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.
    (CVE-2022-35652)

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.15, 3.11.x prior to 3.11.8 or 4.0.x prior to 4.0.2. It is, therefore, affected by multiple vulnerabilities:

- A code injection through an omitted execution parameter elading to Remote Code Execution (RCE) for sites running GhostScript versions older than 9.50. (CVE-2022-35649)

- An arbitrary file read due to an insufficient path checks in a lesson question import available to teachers, managers and admins by default. (CVE-2022-35650)

- A stored Cross-Site Scripting (XSS) and blind Server-Side Request Forgery (SSRF) vulnerabilities due to an insufficient sanitizing of SCORM track details. (CVE-2022-35651)

- An open redirect vulnerability due to the lack of sanitization in the mobile auto-login URL. (CVE-2022-35652)

- A Cross-Site Scripting (XSS) vulnerability in the LTI module only affecting unauthentication users. (CVE-2022-35653)

Note that the scanner has not attempted to exploit this issue but has instead relied only on application's self-reported version number.

ID	Name	Product	Family	Type	Severity
261457	Linux Distros Unpatched Vulnerability : CVE-2022-35652	Nessus	Misc.	Local	medium
423204	SCA: security update for moodle/moodle (GHSA-243v-5pff-qqfj)	Tenable Cloud Security	SCA Checks	Local	medium
423204	SCA: security update for moodle/moodle (GHSA-243v-5pff-qqfj)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
113602	Moodle 4.0.x < 4.0.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
113601	Moodle 3.11.x < 3.11.8 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
113600	Moodle 3.9.x < 3.9.15 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical

Detections

Analytics

CVE-2022-35652

medium

Tenable Plugins

medium

medium

medium

critical

critical

critical