Lucene search

K
osvGoogleOSV:GHSA-58FM-V4PR-JH8P
HistoryMay 17, 2022 - 3:38 a.m.

Moodle Unrestricted file upload vulnerability

2022-05-1703:38:33
Google
osv.dev
5
moodle
file upload
vulnerability
image module
remote authenticated users
arbitrary code
executable extension
unspecified vectors
software

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

74.0%

Unrestricted file upload vulnerability in the double extension support in the β€œimage” module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

74.0%