Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6390
HistoryMay 26, 2018 - 5:31 a.m.

Remote Code Execution (RCE)

2018-05-2605:31:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.832

Percentile

98.5%

Moodle is vulnerable to remote code execution (RCE) attacks. The application does not properly sanitize calculated questions, allowing a malicious teacher user to inject and execute arbitrary code through it.