Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-58fm-v4pr-jh8p

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 8.8

Описание

Moodle Unrestricted file upload vulnerability

Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

Пакеты

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 2.0.1, <= 3.2.1

Отсутствует

EPSS

Процентиль: 88%
0.04385
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

CVSS3: 8.8
nvd
больше 8 лет назад

Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

CVSS3: 8.8
debian
больше 8 лет назад

Unrestricted file upload vulnerability in the double extension support ...

EPSS

Процентиль: 88%
0.04385
Низкий

8.8 High

CVSS3

Дефекты

CWE-434