~ / search / GHSA-2hmm-q272-xmhf

GHSA-2hmm-q272-xmhf

Moodle remote code execution

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-40314

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle < 3.9.17 3.9.17
Packagist moodle/moodle >= 3.11, < 3.11.10 3.11.10
Packagist moodle/moodle >= 4.0, < 4.0.4 4.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.

References

External links from the advisory. They lead to third-party sites.