GHSA-wxqg-fg7v-mmc6

Moodle Authenticated Spelling Binary Remote Code Execution

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-3630

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	moodle/moodle	< 2.5.3	2.5.3

Details

As written in the advisory (Markdown source, shown as plain text).

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2013-3630 advisory
https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one web
https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats web
https://github.com/moodle/moodle package
http://packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html web