Description

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

Remediation

References

CVE-2024-43425

Related Vulnerabilities

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20099)

WordPress Plugin The Post Grid-Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery (5.0.4)

Piwigo Improper Access Control Vulnerability (CVE-2016-10514)

Oracle HTTP Server Other Vulnerability (CVE-2007-0282)

WordPress Plugin bbPress SQL Injection (2.5.14)

Severity

High

Classification

CVE-2024-43425 CWE-94 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities