Description
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
Remediation
References
Related Vulnerabilities
WordPress 5.2.x Prototype Pollution (5.2 - 5.2.14)
WordPress Plugin YARPP-Yet Another Related Posts SQL Injection (5.30.2)
Envoy Proxy Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2024-32975)
MySQL Other Vulnerability (CVE-2010-3680)
WordPress Plugin The Crawl Rate Tracker 'sbtracking-chart-data.php' SQL Injection (2.0.2)