Lucene search

K
osvGoogleOSV:GHSA-XH2J-Q4MC-V522
HistoryMay 13, 2022 - 1:18 a.m.

Moodle calculated question type allows remote code execution by Question authors

2022-05-1301:18:54
Google
osv.dev
10
moodle
remote code execution
calculated question

AI Score

7.8

Confidence

Low

EPSS

0.832

Percentile

98.5%

An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.

AI Score

7.8

Confidence

Low

EPSS

0.832

Percentile

98.5%