Vulnerability CVE-2015-3274

Vulnerability Name:

CVE-2015-3274 (CCN-104542)

Assigned:

2015-07-13

Published:

2015-07-13

Updated:

2020-12-01

Summary:

Cross-site scripting (XSS) vulnerability in the user_get_user_details function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an external_format_text call in a web service.

CVSS v3 Severity:

6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.3 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

5.4 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
4.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

5.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-79

Vulnerability Consequences:

Cross-Site Scripting

References:

Source: MITRE
Type: CNA
CVE-2015-3274

Source: CONFIRM
Type: UNKNOWN
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50130

Source: MLIST
Type: UNKNOWN
[oss-security] 20150713 moodle security announcements

Source: SECTRACK
Type: UNKNOWN
1032877

Source: XF
Type: UNKNOWN
moodle-cve20153274-xss(104542)

Source: CONFIRM
Type: Vendor Advisory
https://moodle.org/mod/forum/discuss.php?d=316664

Source: CCN
Type: Moodle Security Advisory MSA-15-0028
Possible XSS through custom text profile fields in Web Services

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2015-3274

Vulnerable Configuration:

Configuration 1:

cpe:/a:moodle:moodle:2.8.2:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.1:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.3:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.2:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.4:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.6:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.5:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.7:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.6:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.8:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.7:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.1:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.0:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.4:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.3:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.5:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.4:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.6:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.9.0:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.0:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.8:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.0:-:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.9:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.6.10:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:moodle:moodle:2.7.0:-:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.0:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.9.0:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.8.6:*:*:*:*:*:*:*

OR cpe:/a:moodle:moodle:2.7.8:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.ubuntu.bionic:def:201532740000000	V	CVE-2015-3274 on Ubuntu 18.04 LTS (bionic) - low.	2016-02-22
oval:com.ubuntu.artful:def:20153274000	V	CVE-2015-3274 on Ubuntu 17.10 (artful) - low.	2016-02-22
oval:com.ubuntu.trusty:def:20153274000	V	CVE-2015-3274 on Ubuntu 14.04 LTS (trusty) - low.	2016-02-22
oval:com.ubuntu.xenial:def:201532740000000	V	CVE-2015-3274 on Ubuntu 16.04 LTS (xenial) - low.	2016-02-22
oval:com.ubuntu.bionic:def:20153274000	V	CVE-2015-3274 on Ubuntu 18.04 LTS (bionic) - low.	2016-02-22
oval:com.ubuntu.xenial:def:20153274000	V	CVE-2015-3274 on Ubuntu 16.04 LTS (xenial) - low.	2016-02-22
oval:com.ubuntu.disco:def:201532740000000	V	CVE-2015-3274 on Ubuntu 19.04 (disco) - low.	2016-02-22
oval:com.ubuntu.cosmic:def:20153274000	V	CVE-2015-3274 on Ubuntu 18.10 (cosmic) - low.	2016-02-22
oval:com.ubuntu.cosmic:def:201532740000000	V	CVE-2015-3274 on Ubuntu 18.10 (cosmic) - low.	2016-02-22
oval:com.ubuntu.precise:def:20153274000	V	CVE-2015-3274 on Ubuntu 12.04 LTS (precise) - low.	2016-02-22

BACK