Veracode Vulnerability DatabaseVERACODE:44259Arbitrary Code Execution
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.5%
moodle/moodle is vulnerable to Arbitrary Code Execution. The vulnerability exists in the IMSCP activity which allows an attacker to inject and execute arbitrary codes into the system.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79409
bugzilla.redhat.com/show_bug.cgi?id=2243432
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79409
github.com/advisories/GHSA-w8x2-w4qr-v3x4
github.com/moodle/moodle/commit/0ae5ee6dfefdc3d70716c97a10081bd22cde60a6
github.com/moodle/moodle/commit/1f2fbeb50c5cc62a2eb1e2b2c4edea78f5c52bda
github.com/moodle/moodle/commit/74b21db96b0e11d4650c11de07d04da4449529da
github.com/moodle/moodle/commit/74b62601d0c85eae7450cb4591444aff12b45856
github.com/moodle/moodle/commit/c1663de71ebbc53f478d9fcbcd089f90dac2a9d3
moodle.org/mod/forum/discuss.php?d=451581
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.5%