CVE-2021-43129

A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz.

CVSS v3 6.5 MEDIUM
CVSS v2.0 5.8 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://community.brightspace.com/s/article/retirement-notice-disable-right-click	Vendor Advisory
https://github.com/Skotizo/CVE-2021-43129	Exploit Third Party Advisory
https://www.d2l.com/learning-management-system-lms/	Vendor Advisory
https://community.brightspace.com/s/article/retirement-notice-disable-right-click	Vendor Advisory
https://github.com/Skotizo/CVE-2021-43129	Exploit Third Party Advisory
https://www.d2l.com/learning-management-system-lms/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:d2l:brightspace:20.21.7:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-04-19 13:15

Updated : 2024-11-21 06:28

NVD link : CVE-2021-43129

Mitre link : CVE-2021-43129

CVE.ORG link : CVE-2021-43129

JSON object : View

Products Affected

d2l

brightspace

CWE

NVD-CWE-Other

{"id": "CVE-2021-43129", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "published": "2022-04-19T13:15:08.197", "references": [{"url": "https://community.brightspace.com/s/article/retirement-notice-disable-right-click", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/Skotizo/CVE-2021-43129", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.d2l.com/learning-management-system-lms/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://community.brightspace.com/s/article/retirement-notice-disable-right-click", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/Skotizo/CVE-2021-43129", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.d2l.com/learning-management-system-lms/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "A bypass exists for Desire2Learn/D2L Brightspace\u2019s \u201cDisable Right Click\u201d option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser\u2019s right click menu even when \u201cDisable Right Click\u201d is enabled on the quiz."}, {"lang": "es", "value": "Existe un bypass para la opci\u00f3n \"Desactivar el clic derecho\" de Desire2Learn/D2L Brightspace en la funci\u00f3n de cuestionamiento, que permite a un participante acceder a la funcionalidad de impresi\u00f3n y copia a trav\u00e9s del men\u00fa del clic derecho del navegador, incluso cuando \"Desactivar el clic derecho\" est\u00e1 activado en el cuestionario"}], "lastModified": "2024-11-21T06:28:42.780", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:d2l:brightspace:20.21.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F384E99-9849-4B57-AF86-F3045125604A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}