Описание
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:moodle:moodle:3.10.0:-:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.69115
Средний
8.2 High
CVSS3
9.1 Critical
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 9.1
ubuntu
почти 4 года назад
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.
CVSS3: 9.1
github
около 3 лет назад
Moodle command execution vulnerability exists in the default legacy spellchecker plugin
EPSS
Процентиль: 99%
0.69115
Средний
8.2 High
CVSS3
9.1 Critical
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78