{"metadata": {"vulnerability": "CVE-2023-30943", "count": 37, "kinds": {"milestone": 7, "sighting": 14, "kev": 0, "other": 16}}, "data": [{"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-30943", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / fedora", "record": "CVE-2023-30943", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2023-05-01T04:00:00Z", "date_only": false, "value": "2023-05-01T04:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / fedora", "record": "CVE-2023-30943", "field": "containers.cna.datePublic"}, {"timestamp": "2023-05-01T04:00:00Z", "date_only": false, "value": "2023-05-01T04:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / fedora", "record": "CVE-2023-30943", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2023-05-02T00:00:00Z", "date_only": true, "value": "2023-05-02", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-30943", "record": "GSD-2023-30943", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-05-02T00:00:00Z", "date_only": false, "value": "2023-05-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-30943", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-05-02T20:15:00Z", "date_only": false, "value": "2023-05-02T20:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-30943", "record": "UBUNTU-CVE-2023-30943", "field": "published"}, {"timestamp": "2023-05-02T20:15:10Z", "date_only": false, "value": "2023-05-02T20:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-22GJ-8QJ2-FJ46", "record": "GHSA-22GJ-8QJ2-FJ46", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-05-02T20:15:10.943Z", "date_only": false, "value": "2023-05-02T20:15:10.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-30943", "record": "FKIE_CVE-2023-30943", "field": "published"}, {"timestamp": "2023-05-02T20:15:10.943Z", "date_only": false, "value": "2023-05-02T20:15:10.943", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-30943", "record": "GSD-2023-30943", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-05-02T21:31:48Z", "date_only": false, "value": "2023-05-02T21:31:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-22GJ-8QJ2-FJ46", "record": "GHSA-22GJ-8QJ2-FJ46", "field": "published"}, {"timestamp": "2023-05-03T00:00:00Z", "date_only": false, "value": "2023-05-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0352", "record": "CERTFR-2023-AVI-0352", "field": "revisions.0.revision_date"}, {"timestamp": "2023-05-03T00:30:27Z", "date_only": false, "value": "2023-05-03T00:30:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/63177", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "b7a91fa4-faf8-4cd5-bb8f-57fa7b8b3129", "content": "\u203c CVE-2023-30943 \u203c\n\nThe vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/63177"}, {"timestamp": "2023-05-11T00:00:00Z", "date_only": true, "value": "2023-05-11", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-30943", "record": "GSD-2023-30943", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-08-31T08:22:19Z", "date_only": false, "value": "2023-08-31T08:22:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5049", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "f0948260-d54d-47d1-b09a-d8415ca062cc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-30943  RCE PoC\nURL\uff1ahttps://github.com/d0rb/CVE-2023-30943\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5049"}, {"timestamp": "2023-09-01T05:35:16Z", "date_only": false, "value": "2023-09-01T05:35:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/980", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "6314e5bf-e439-41a9-90dc-bf6d12e03a29", "content": "https://github.com/d0rb/CVE-2023-30943\n#github", "url": "https://t.me/CNArsenal/980"}, {"timestamp": "2023-09-01T11:00:45Z", "date_only": false, "value": "2023-09-01T11:00:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8948", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "e541df9f-5ad6-4098-a39f-5fdf7d3f546e", "content": "#exploit\n1. CVE-2023-41717:\nInappropriate file type control in Zscaler Proxy\nhttps://github.com/federella/CVE-2023-41717\n\n2. CVE-2023-30943:\nMoodle Vulnerabilities Exploits\nhttps://github.com/d0rb/CVE-2023-30943", "url": "https://t.me/CyberSecurityTechnologies/8948"}, {"timestamp": "2023-09-02T04:07:54Z", "date_only": false, "value": "2023-09-02T04:07:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E5rIyo4yL4A8Cl6ljSa_CCU0uFuGXhuvUe-Dy3r702CaxA", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "ad917c92-226c-4d8a-afee-fde4fc7fb0a9"}, {"timestamp": "2023-09-02T04:30:46Z", "date_only": false, "value": "2023-09-02T04:30:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/4240", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "739dcd8b-c86b-4926-9f83-daf84f527587", "content": "\ud83d\udd78Department of Defence South African (DARPA) Data Leak : Download\n\n\ud83c\udfe5Canadian Nurses Association Data Leak : Download\n\n\ud83d\udc7eHackBot \u2013 AI Cybersecurity Chatbot : Download\n\n\ud83e\uddeeCVE-2023-30943 Moodle Exploit : Download\n\n\ud83d\udc32CVE-2023-41717 Zscaler Proxy Exploit : Download\n\n\ud83d\udcdfB(l)utter \u2013 Flutter Mobile Application Reverse Engineering Tool : Download\n\n\ud83e\udeacGreenBot : Download", "url": "https://t.me/crackcodes/4240"}, {"timestamp": "2023-09-04T06:54:35Z", "date_only": false, "value": "2023-09-04T06:54:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/md5Pwtve7jVTx3xy8D8J1lcevEgfzLM_a_lPeb-uR2QiMQ", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "5ca50bb4-9b5d-40d0-b43a-1e6bdfed6a0c"}, {"timestamp": "2023-09-04T07:05:29Z", "date_only": false, "value": "2023-09-04T07:05:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/4258", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "616f6231-2df0-464a-a1e3-c503ec1769ba", "content": "\ud83d\udd78Department of Defence South African (DARPA) Data Leak : Download\n\n\ud83c\udfe5Canadian Nurses Association Data Leak : Download\n\n\ud83d\udc7eHackBot \u2013 AI Cybersecurity Chatbot : Download\n\n\ud83e\uddeeCVE-2023-30943 Moodle Exploit : Download\n\n\ud83d\udc32CVE-2023-41717 Zscaler Proxy Exploit : Download\n\n\ud83d\udcdfB(l)utter \u2013 Flutter Mobile Application Reverse Engineering Tool : Download\n\n\ud83e\udeacGreenBot : Download", "url": "https://t.me/crackcodes/4258"}, {"timestamp": "2023-09-07T13:27:41Z", "date_only": false, "value": "2023-09-07T13:27:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5100", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "fe37dadd-daff-437f-8708-2a79a0e0cd7b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle, which allows unauthorized folder creation via specially crafted requests in TinyMCE loaders.\nURL\uff1ahttps://github.com/Chocapikk/CVE-2023-30943\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5100"}, {"timestamp": "2023-09-09T12:36:01Z", "date_only": false, "value": "2023-09-09T12:36:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8993", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "a702fdb9-356e-4d15-b1be-9807a0e49ae6", "content": "#tools\n#Blue_Team_Techniques\nA Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle\nhttps://github.com/Chocapikk/CVE-2023-30943", "url": "https://t.me/CyberSecurityTechnologies/8993"}, {"timestamp": "2023-09-10T07:20:51Z", "date_only": false, "value": "2023-09-10T07:20:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11545", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "fac01e13-f0fc-4b63-9e72-bf8d20d5e07d", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 A Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle, which allows unauthorized folder creation via specially crafted requests in TinyMCE loaders.\n\nhttps://github.com/Chocapikk/CVE-2023-30943", "url": "https://t.me/cKure/11545"}, {"timestamp": "2023-09-10T12:01:22Z", "date_only": false, "value": "2023-09-10T12:01:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3187", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "b8a93caa-b55c-4713-ae15-c66beb5e0dd8", "content": "Hackers Factory \n\nA fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests\n\nhttps://github.com/projectdiscovery/naabu\n\nA collection of phishing samples for researchers and detection developers.\n\nhttps://github.com/rf-peixoto/phishing_pot\n\nPassive subdomain continous monitoring tool.\n\nhttps://github.com/e1abrador/sub.Monitor\n\nSecurity scanner for your Terraform code\n\nhttps://github.com/aquasecurity/tfsec\n\nDetect and remediate misconfigurations and security risks across all your GitHub and GitLab assets\n\nhttps://github.com/Legit-Labs/legitify\n\nStreamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools.\n\nhttps://github.com/thecyberneh/scriptkiddi3\n\nUseful resources for SOC Analyst and SOC Analyst candidates.\n\nhttps://github.com/LetsDefend/awesome-soc-analyst\n\nXML-RPC Vulnerability Checker and Directory Fuzzer\n\nhttps://github.com/MINAD0/XML-RPC-Check\n\nA Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle, which allows unauthorized folder creation via specially crafted requests in TinyMCE loaders.\n\nhttps://github.com/Chocapikk/CVE-2023-30943\n\nAn exploit for OpenTSDB <= 2.4.1 cmd injection (CVE-2023-36812/CVE-2023-25826) written in Fortran\n\nhttps://github.com/ErikWynter/opentsdb_key_cmd_injection\n\nNotepad++ heap buffer overflow vulnerability CVE-2023-40031 analysis and reproduction\n\nhttps://github.com/webraybtl/CVE-2023-40031\n\nPMP-Decrypter. This is a tool to decrypt the encrypted password strings in \"Patch My PC\"\n\nhttps://github.com/LuemmelSec/PMP-Decrypter\n\n#infosec #cybersecurity #hackersfactory \n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3187"}, {"timestamp": "2023-12-13T01:20:52.112Z", "date_only": false, "value": "2023-12-13T01:20:52.112911Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-30943", "record": "GSD-2023-30943", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:59:39.012Z", "date_only": false, "value": "2024-03-06T10:59:39.012Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MOODLE-2023-30943", "record": "BIT-MOODLE-2023-30943", "field": "published"}, {"timestamp": "2024-04-19T13:40:16.760Z", "date_only": false, "value": "2024-04-19T13:40:16.760Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fedora", "record": "CVE-2023-30943", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-19T14:15:09.583Z", "date_only": false, "value": "2024-04-19T14:15:09.583", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-30943", "record": "GSD-2023-30943", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-19T16:22:11Z", "date_only": false, "value": "2024-04-19T16:22:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-22GJ-8QJ2-FJ46", "record": "GHSA-22GJ-8QJ2-FJ46", "field": "modified"}, {"timestamp": "2024-05-12T05:59:09Z", "date_only": false, "value": "2024-05-12T05:59:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/1103", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "83200bfb-7dc5-4463-97c2-03f54b949f63", "content": "CVE-2023-30943: Moodle <= 4.2.0 - \u0627\u06cc\u062c\u0627\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u067e\u0648\u0634\u0647 (Stored-XSS) \u0628\u0647 RCE\n\u0644\u06cc\u0646\u06a9: https://www.sonarsource.com/blog/playing-dominos-with-moodles-security-1/\n\nCVE-2023-30943 : Moodle <= 4.2.0 - Arbitrary folder creation (Stored-XSS) to RCE \nLink : https://www.sonarsource.com/blog/playing-dominos-with-moodles-security-1/", "url": "https://t.me/MrVGunz/1103"}, {"timestamp": "2024-08-02T14:37:15.692Z", "date_only": false, "value": "2024-08-02T14:37:15.692Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-30943", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T14:37:15.692Z", "date_only": false, "value": "2024-08-02T14:37:15.692Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-30943", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:55:57.460Z", "date_only": false, "value": "2026-06-17T05:55:57.460", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-30943", "record": "FKIE_CVE-2023-30943", "field": "lastModified"}, {"timestamp": "2026-09-02T01:00:04.191Z", "date_only": false, "value": "2026-09-02T01:00:04.191321Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gaBdUAEEWVgUcYnHku1FjILsSJN1BtvDBCiJZ9Y-qG01X4M", "record": "CVE-2023-30943", "field": "creation_timestamp", "uuid": "fb37753d-a0ae-42b5-8ed7-c605ab196424"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MOODLE-2023-30943", "record": "BIT-MOODLE-2023-30943", "field": "modified"}, {"timestamp": "2026-09-23T15:45:16Z", "date_only": false, "value": "2026-09-23T15:45:16Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-30943", "record": "UBUNTU-CVE-2023-30943", "field": "modified"}]}