Not rated
CVE-2021-20187 It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to…
Description
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle | Versions not published |
References
- moodle.org moodle.org
Timeline
- Published
- Last modified
Other CVEs of Moodle
The 89 CVEs of Moodle →
CVE-2022-40208
In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential…
4.3
Medium
CVE-2021-36402
In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration…
5.3
Medium
CVE-2021-36395
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion…
7.5
High
CVE-2021-36392
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses
Not rated