GHSA-8jhp-2gcr-qw96CriticalCVSS 9.8

Moodle vulnerable to RCE via unsafe deserialization

Published
November 23, 2021
Last Modified
July 11, 2023

🔗 CVE IDs covered (1)

CVE-2021-3943 →

📋 Description

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.11, <= 3.11.3
  • composer/moodle/moodle:>= 3.10, <= 3.10.7
  • composer/moodle/moodle:>= 3.9, <= 3.9.10

🔗 References (5)