Описание
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
Отчет
This vulnerability is rated as having Important impact because successful exploitation enables arbitrary code execution and compromise of the underlying system, but requires elevated credentials rather than being accessible to unauthenticated attackers. Exploitation depends on an authenticated account having specific privileges to upload and initiate archive restorations. Furthermore, Moodle is not included or supported in Red Hat Enterprise Linux.
Дополнительная информация
Статус:
EPSS
7.2 High
CVSS3
Связанные уязвимости
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
A flaw was identified in Moodle\u2019s backup restore functionality wh ...
EPSS
7.2 High
CVSS3