GHSA-v6f4-v8h8-3c87HighCVSS 8.1

Moodle Remote Code Execution vulnerability

Published
November 7, 2024
Last Modified
November 7, 2024

🔗 CVE IDs covered (1)

CVE-2024-43425 →

📋 Description

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

🎯 Affected products4

  • composer/moodle/moodle:< 4.1.12
  • composer/moodle/moodle:>= 4.2.0-beta, < 4.2.9
  • composer/moodle/moodle:>= 4.3.0-beta, < 4.3.6
  • composer/moodle/moodle:>= 4.4.0-beta, < 4.4.2

🔗 References (5)