Back to feed
EUVD-2022-5790 · Published May 13, 2022
Moodle calculated question type allows remote code execution by Question authors An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.
Technologies
Moodle Moodle
Weaknesses
CWE-94
CVSS scores
- v3.08.8
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Stealth
References
Potentially impacted assets
See if this affects your attack surface
