Описание
A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.
Отчет
This vulnerability is rated as an Important severity because it enables arbitrary command execution on the host operating system with the privileges of the web service, posing a severe threat to system confidentiality and integrity. The risk is constrained from Critical because exploitation demands high administrative privileges within Moodle to alter filter settings, alongside the requirement that both the TeX filter and external tools like ImageMagick are active. Moodle is not distributed in Red Hat Enterprise Linux and is only available through community projects such as Fedora.
Дополнительная информация
Статус:
EPSS
7.2 High
CVSS3
Связанные уязвимости
A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.
A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.
A vulnerability was found in a Moodle TeX filter administrative settin ...
A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.
EPSS
7.2 High
CVSS3