CVE-2024-43427: Moodle: admin presets export tool includes some secrets that should not be exported
A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43427?
CVE-2024-43427 is considered a high-severity vulnerability due to the potential exposure of sensitive secrets and keys.
How do I fix CVE-2024-43427?
To fix CVE-2024-43427, update to Moodle versions 4.1.13, 4.2.10, 4.3.7, or 4.4.3 or later.
What are the risks associated with CVE-2024-43427?
The main risk of CVE-2024-43427 is that sensitive information could be unintentionally disclosed if the site administration presets are shared.
Which versions of Moodle are affected by CVE-2024-43427?
CVE-2024-43427 affects Moodle versions prior to 4.1.12, 4.2.9, 4.3.6, and 4.4.2.
Can CVE-2024-43427 allow unauthorized access to my Moodle instance?
While CVE-2024-43427 does not directly grant unauthorized access, it can lead to the exposure of sensitive information that could be exploited.