EUVD-2022-6384

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerability in Moodle allows directory traversal attacks via input validation error during imports

Reporter	Title	Published	Views	Family All 61
ATTACKERKB	CVE-2022-35650	25 Jul 202216:15	–	attackerkb
Circl	CVE-2022-35650	25 Jul 202220:33	–	circl
CNNVD	Moodle 输入验证错误漏洞	19 Jul 202200:00	–	cnnvd
CNVD	Moodle arbitrary file reading vulnerability	21 Jul 202200:00	–	cnvd
Check Point Advisories	Moodle Directory Traversal (CVE-2022-35650)	15 Aug 202200:00	–	checkpoint_advisories
CVE	CVE-2022-35650	25 Jul 202215:29	–	cve
Cvelist	CVE-2022-35650	25 Jul 202215:29	–	cvelist
Fedora	[SECURITY] Fedora 36 Update: moodle-3.11.8-1.fc36	27 Jul 202202:24	–	fedora
Fedora	[SECURITY] Fedora 35 Update: moodle-3.11.8-1.fc35	27 Jul 202202:35	–	fedora
Github Security Blog	Moodle Arbitrary file read when importing lesson questions	26 Jul 202200:00	–	github

[
  {
    "enisaIdVendor": [
      {
        "id": "22fddf6f-9801-32bf-9d1f-21e4ef1e83ab",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-35650
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/moodle/moodle
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V
moodle	www.moodle.org/mod/forum/discuss.php
git	www.git.moodle.org/gw
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/

03 Oct 2025 20:07Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.17.5

EPSS0.00441