Описание
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.
Ссылки
- Patch
- Issue TrackingThird Party Advisory
- PatchVendor Advisory
- Patch
- Issue TrackingThird Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
6.5 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
Связанные уязвимости
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.
In a shared hosting environment that has been misconfigured to allow a ...
Уязвимость виртуальной обучающей среды Moodle, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код
EPSS
6.5 Medium
CVSS3
9.8 Critical
CVSS3