Lucene search
+L

Moodle spellchecker plugin command execution vulnerability

🗓️ 22 Jun 2021 00:00:00Reported by Talos IntelligenceType 
talos
 talos
🔗 www.talosintelligence.com👁 146 Views

A command execution vulnerability exists in Moodle 3.10 spellchecker plugin, allowing an attacker with administrator privileges to execute arbitrary commands

Related
ReporterTitlePublishedViews
Family
zdt
zdt
Moodle SpellChecker Path Authenticated Remote Command Execution Exploit
13 Oct 202100:00
zdt
zdt
zdt
Moodle Authenticated Spelling Binary Remote Code Execution Exploit
13 Oct 202100:00
zdt
attackerkb
ATTACKERKB
CVE-2021-21809
23 Jun 202122:15
attackerkb
circl
Circl
CVE-2021-21809
24 Jun 202102:17
circl
cnnvd
CNNVD
Moodle 操作系统命令注入漏洞
22 Jun 202100:00
cnnvd
cnvd
CNVD
Moodle Command Execution Vulnerability
25 Jun 202100:00
cnvd
checkpoint_advisories
Check Point Advisories
Moodle Command Injection (CVE-2021-21809)
26 Jul 202100:00
checkpoint_advisories
cve
CVE
CVE-2021-21809
23 Jun 202121:25
cve
cvelist
Cvelist
CVE-2021-21809
23 Jun 202121:25
cvelist
github
Github Security Blog
Moodle command execution vulnerability exists in the default legacy spellchecker plugin
24 May 202219:06
github
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Jun 2021 00:00Current
9.7High risk
Vulners AI Score9.7
CVSS 29
CVSS 3.19.1
CVSS 38.2
EPSS0.24173
146