8.2
High
CVE-2021-21809 A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10
Description
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle | Versions not published |
References
- talosintelligence.com talosintelligence.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of Moodle
The 89 CVEs of Moodle →
CVE-2022-40208
In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential…
4.3
Medium
CVE-2021-36402
In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration…
5.3
Medium
CVE-2021-36395
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion…
7.5
High
CVE-2021-36392
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses
Not rated