Description

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

Remediation

References

CVE-2024-43425

Related Vulnerabilities

WordPress Plugin NextGEN Gallery-WordPress Gallery 'nggallery-manage-gallery' HTML Injection (0.96)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-9547)

WordPress Plugin Widgets for WooCommerce Products on Elementor Security Bypass (1.0.5)

GibbonEdu Session Fixation Vulnerability (CVE-2022-27305)

PostgreSQL CVE-2021-3677 Vulnerability (CVE-2021-3677)

Severity

High

Classification

CVE-2024-43425 CWE-94 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities