2 lines
12 KiB
JSON
2 lines
12 KiB
JSON
{"affected":[{"affectedData":[{"modules":["User Selector"],"product":"LMS","vendor":"Totara","versions":[{"status":"affected","version":"13.0"},{"status":"affected","version":"13.1"},{"status":"affected","version":"13.2"},{"status":"affected","version":"13.3"},{"status":"affected","version":"13.4"},{"status":"affected","version":"13.5"},{"status":"affected","version":"13.6"},{"status":"affected","version":"13.7"},{"status":"affected","version":"13.8"},{"status":"affected","version":"13.9"},{"status":"affected","version":"13.10"},{"status":"affected","version":"13.11"},{"status":"affected","version":"13.12"},{"status":"affected","version":"13.13"},{"status":"affected","version":"13.14"},{"status":"affected","version":"13.15"},{"status":"affected","version":"13.16"},{"status":"affected","version":"13.17"},{"status":"affected","version":"13.18"},{"status":"affected","version":"13.19"},{"status":"affected","version":"13.20"},{"status":"affected","version":"13.21"},{"status":"affected","version":"13.22"},{"status":"affected","version":"13.23"},{"status":"affected","version":"13.24"},{"status":"affected","version":"13.25"},{"status":"affected","version":"13.26"},{"status":"affected","version":"13.27"},{"status":"affected","version":"13.28"},{"status":"affected","version":"13.29"},{"status":"affected","version":"13.30"},{"status":"affected","version":"13.31"},{"status":"affected","version":"13.32"},{"status":"affected","version":"13.33"},{"status":"affected","version":"13.34"},{"status":"affected","version":"13.35"},{"status":"affected","version":"13.36"},{"status":"affected","version":"13.37"},{"status":"affected","version":"13.38"},{"status":"affected","version":"13.39"},{"status":"affected","version":"13.40"},{"status":"affected","version":"13.41"},{"status":"affected","version":"13.42"},{"status":"affected","version":"13.43"},{"status":"affected","version":"13.44"},{"status":"affected","version":"13.45"},{"status":"affected","version":"14.0"},{"status":"affected","version":"14.1"},{"status":"affected","version":"14.2"},{"status":"affected","version":"14.3"},{"status":"affected","version":"14.4"},{"status":"affected","version":"14.5"},{"status":"affected","version":"14.6"},{"status":"affected","version":"14.7"},{"status":"affected","version":"14.8"},{"status":"affected","version":"14.9"},{"status":"affected","version":"14.10"},{"status":"affected","version":"14.11"},{"status":"affected","version":"14.12"},{"status":"affected","version":"14.13"},{"status":"affected","version":"14.14"},{"status":"affected","version":"14.15"},{"status":"affected","version":"14.16"},{"status":"affected","version":"14.17"},{"status":"affected","version":"14.18"},{"status":"affected","version":"14.19"},{"status":"affected","version":"14.20"},{"status":"affected","version":"14.21"},{"status":"affected","version":"14.22"},{"status":"affected","version":"14.23"},{"status":"affected","version":"14.24"},{"status":"affected","version":"14.25"},{"status":"affected","version":"14.26"},{"status":"affected","version":"14.27"},{"status":"affected","version":"14.28"},{"status":"affected","version":"14.29"},{"status":"affected","version":"14.30"},{"status":"affected","version":"14.31"},{"status":"affected","version":"14.32"},{"status":"affected","version":"14.33"},{"status":"affected","version":"14.34"},{"status":"affected","version":"14.35"},{"status":"affected","version":"14.36"},{"status":"affected","version":"14.37"},{"status":"affected","version":"15.0"},{"status":"affected","version":"15.1"},{"status":"affected","version":"15.2"},{"status":"affected","version":"15.3"},{"status":"affected","version":"15.4"},{"status":"affected","version":"15.5"},{"status":"affected","version":"15.6"},{"status":"affected","version":"15.7"},{"status":"affected","version":"15.8"},{"status":"affected","version":"15.9"},{"status":"affected","version":"15.10"},{"status":"affected","version":"15.11"},{"status":"affected","version":"15.12"},{"status":"affected","version":"15.13"},{"status":"affected","version":"15.14"},{"status":"affected","version":"15.15"},{"status":"affected","version":"15.16"},{"status":"affected","version":"15.17"},{"status":"affected","version":"15.18"},{"status":"affected","version":"15.19"},{"status":"affected","version":"15.20"},{"status":"affected","version":"15.21"},{"status":"affected","version":"15.22"},{"status":"affected","version":"15.23"},{"status":"affected","version":"15.24"},{"status":"affected","version":"15.25"},{"status":"affected","version":"15.26"},{"status":"affected","version":"15.27"},{"status":"affected","version":"15.28"},{"status":"affected","version":"15.29"},{"status":"affected","version":"15.30"},{"status":"affected","version":"15.31"},{"status":"affected","version":"15.32"},{"status":"affected","version":"16.0"},{"status":"affected","version":"16.1"},{"status":"affected","version":"16.2"},{"status":"affected","version":"16.3"},{"status":"affected","version":"16.4"},{"status":"affected","version":"16.5"},{"status":"affected","version":"16.6"},{"status":"affected","version":"16.7"},{"status":"affected","version":"16.8"},{"status":"affected","version":"16.9"},{"status":"affected","version":"16.10"},{"status":"affected","version":"16.11"},{"status":"affected","version":"16.12"},{"status":"affected","version":"16.13"},{"status":"affected","version":"16.14"},{"status":"affected","version":"16.15"},{"status":"affected","version":"16.16"},{"status":"affected","version":"16.17"},{"status":"affected","version":"16.18"},{"status":"affected","version":"16.19"},{"status":"affected","version":"16.20"},{"status":"affected","version":"16.21"},{"status":"affected","version":"16.22"},{"status":"affected","version":"16.23"},{"status":"affected","version":"16.24"},{"status":"affected","version":"16.25"},{"status":"affected","version":"16.26"},{"status":"affected","version":"17.0"},{"status":"affected","version":"17.1"},{"status":"affected","version":"17.2"},{"status":"affected","version":"17.3"},{"status":"affected","version":"17.4"},{"status":"affected","version":"17.5"},{"status":"affected","version":"17.6"},{"status":"affected","version":"17.7"},{"status":"affected","version":"17.8"},{"status":"affected","version":"17.9"},{"status":"affected","version":"17.10"},{"status":"affected","version":"17.11"},{"status":"affected","version":"17.12"},{"status":"affected","version":"17.13"},{"status":"affected","version":"17.14"},{"status":"affected","version":"17.15"},{"status":"affected","version":"17.16"},{"status":"affected","version":"17.17"},{"status":"affected","version":"17.18"},{"status":"affected","version":"17.19"},{"status":"affected","version":"17.20"},{"status":"affected","version":"18.0"},{"status":"affected","version":"18.1"},{"status":"affected","version":"18.2"},{"status":"affected","version":"18.3"},{"status":"affected","version":"18.4"},{"status":"affected","version":"18.5"},{"status":"affected","version":"18.6"},{"status":"affected","version":"18.7"},{"status":"unaffected","version":"13.46"},{"status":"unaffected","version":"14.38"},{"status":"unaffected","version":"15.33"},{"status":"unaffected","version":"16.27"},{"status":"unaffected","version":"17.21"},{"status":"unaffected","version":"18.8"}]}],"source":"cna@vuldb.com"},{"affectedData":[{"cpes":["cpe:2.3:a:totara:enterprise_lms:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"enterprise_lms","vendor":"totara","versions":[{"lessThanOrEqual":"18.0.1 Build 20231128.01","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability classified as problematic has been found in Totara LMS up to 18.7. This affects an unknown part of the component User Selector. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 13.46, 14.38, 15.33, 16.27, 17.21 and 18.8 is able to address this issue. It is recommended to upgrade the affected component."},{"lang":"es","value":"Una vulnerabilidad ha sido encontrada en Totara LMS 18.0.1 Build 20231128.01 y clasificada como problemática. Esto afecta a una parte desconocida. La manipulación conduce a Cross-Site Request Forgery. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-261369. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera."}],"id":"CVE-2024-3932","lastModified":"2026-06-17T07:45:30.147","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"HIGH","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.6,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":4.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"cna@vuldb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":1.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3932","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-04-22T18:59:52.785734Z","version":"2.0.3"}}]},"published":"2024-04-18T00:15:08.033","references":[{"source":"cna@vuldb.com","url":"https://totara.community/mod/forum/discuss.php?d=27644"},{"source":"cna@vuldb.com","url":"https://vuldb.com/?ctiid.261369"},{"source":"cna@vuldb.com","url":"https://vuldb.com/?id.261369"},{"source":"cna@vuldb.com","url":"https://vuldb.com/?submit.314381"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://vuldb.com/?ctiid.261369"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://vuldb.com/?id.261369"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://vuldb.com/?submit.314381"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"},{"lang":"en","value":"CWE-862"}],"source":"cna@vuldb.com","type":"Secondary"}]}
|