What is GHSA-h9w8-4376-j344?

GHSA-h9w8-4376-j344 is a security advisory published by GitHub Security Advisories with Medium severity. Moodle does not properly validate module instance id

Which CVE IDs does GHSA-h9w8-4376-j344 cover?

GHSA-h9w8-4376-j344 covers the following CVE IDs: CVE-2006-4936. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-h9w8-4376-j344?

GHSA-h9w8-4376-j344 affects 1 product, including: composer/moodle/moodle:\u003c 1.6.2.

GHSA-h9w8-4376-j344Medium

Moodle does not properly validate module instance id

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

February 12, 2024

🔗 CVE IDs covered (1)

CVE-2006-4936 →

📋 Description

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

🎯 Affected products1

composer/moodle/moodle:< 1.6.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2006-4936
https://github.com/moodle/moodle/commit/0f69811d980002709668a2001477a811bfee4bab
https://web.archive.org/web/20061230195936/http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
https://github.com/advisories/GHSA-h9w8-4376-j344