CVE-2014-3545

Опубликовано: 29 июл. 2014

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:moodle:moodle:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия до 2.3.11 (включая)

cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.10:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:moodle:moodle:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.3:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:moodle:moodle:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.6:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01284

Низкий

6 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2014-3545

ubuntu

почти 11 лет назад

CVE-2014-3545

debian

почти 11 лет назад

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x ...

GHSA-3m99-h3hp-w9j7

github

около 3 лет назад

Moodle remote code execution via quiz questions

EPSS

Процентиль: 79%

0.01284

Низкий

6 Medium

CVSS2

Дефекты

CWE-94