| Title | Moodle の calendar/set.php における CRLF インジェクションの脆弱性 |
|---|---|
| Summary | Moodle の Calendar コンポーネント内の calendar/set.php には、CRLF インジェクションの脆弱性が存在します。 |
| Possible impacts | 第三者により、任意の HTTP ヘッダを挿入される、および HTTP レスポンス分割攻撃を誘発される可能性があります。 |
| Solution | ベンダ情報および参考情報を参照して適切な対策を実施してください。 |
| Publication Date | Dec. 22, 2011, midnight |
| Registration Date | Dec. 26, 2011, 4:32 p.m. |
| Last Update | Dec. 26, 2011, 4:32 p.m. |
| CVSS2.0 : 警告 | |
| Score | 5 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
| Moodle |
| Moodle 1.9.15 未満の 1.9.x |
| Moodle 2.0.6 未満の 2.0.x |
| Moodle 2.1.3 未満の 2.1.x |
| Moodle 2.2 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2011年12月26日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable. |
|---|---|
| Publication Date | Dec. 23, 2011, 12:29 a.m. |
| Registration Date | Jan. 28, 2021, 4:39 p.m. |
| Last Update | Nov. 21, 2024, 10:32 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.14:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:* | |||||