CVE-2012-6112 PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moodle/moodle(Packagist) | >= 2.1.0, < 2.1.10 | 2.1.10 |
| moodle/moodle(Packagist) | >= 2.2.0, < 2.2.7 | 2.2.7 |
| moodle/moodle(Packagist) | >= 2.3.0, < 2.3.4 | 2.3.4 |
| moodle/moodle(Packagist) | >= 2.4.0, < 2.4.1 | 2.4.1 |
| moodle/moodle(Packagist) | = 2.4.0 | No fix listed |
| moodle/moodle(Packagist) | = v2.4.0 | No fix listed |
| debian/wordpress(Debian:12) | < 3.5.1+dfsg-2 | 3.5.1+dfsg-2 |
| debian/wordpress(Debian:14) | < 3.5.1+dfsg-2 | 3.5.1+dfsg-2 |
| debian/wordpress(Debian:13) | < 3.5.1+dfsg-2 | 3.5.1+dfsg-2 |
| tinymce spellchecker php | = 2.0 | No fix listed |
| tinymce spellchecker php | = 2.0-a1 | No fix listed |
| tinymce spellchecker php | = 2.0-a2 | No fix listed |
| tinymce spellchecker php | = 2.0-b1 | No fix listed |
| tinymce spellchecker php | = 2.0-b2 | No fix listed |
| tinymce spellchecker php | = 2.0-b3 | No fix listed |
| tinymce spellchecker php | = 2.0-rc1 | No fix listed |
| tinymce spellchecker php | = 2.0.1 | No fix listed |
| tinymce spellchecker php | = 2.0.2 | No fix listed |
| tinymce spellchecker php | = 2.0.3 | No fix listed |
| tinymce spellchecker php | = 2.0.6 | No fix listed |
| moodle/moodle | = 2.1.0 | No fix listed |
| moodle/moodle | = 2.1.1 | No fix listed |
| moodle/moodle | = 2.1.2 | No fix listed |
| moodle/moodle | = 2.1.3 | No fix listed |
| moodle/moodle | = 2.1.4 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| moodle/moodle | = 2.1.5 | No fix listed |
| moodle/moodle | = 2.1.6 | No fix listed |
| moodle/moodle | = 2.1.7 | No fix listed |
| moodle/moodle | = 2.1.8 | No fix listed |
| moodle/moodle | = 2.1.9 | No fix listed |
| moodle/moodle | = 2.2.0 | No fix listed |
| moodle/moodle | = 2.2.1 | No fix listed |
| moodle/moodle | = 2.2.2 | No fix listed |
| moodle/moodle | = 2.2.3 | No fix listed |
| moodle/moodle | = 2.2.4 | No fix listed |
| moodle/moodle | = 2.2.5 | No fix listed |
| moodle/moodle | = 2.2.6 | No fix listed |
| moodle/moodle | = 2.3.0 | No fix listed |
| moodle/moodle | = 2.3.1 | No fix listed |
| moodle/moodle | = 2.3.2 | No fix listed |
| moodle/moodle | = 2.3.3 | No fix listed |
| moodle/moodle | = 2.4.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- github.com patch
- github.com patch
- github.com product
- moodle.org
- web.archive.org
- web.archive.org
- git.moodle.org
- [oss-security] 20130121 Moodle security notifications public mailing-list
- Debian Security Tracker CVE-2012-6112 vendor-advisory
- bugs.debian.org issue-tracking
- github.com
- www.tinymce.com
- www.tinymce.com vendor-advisory