by Kastro
Paper/Archive/CVE-2022-40314

CVE-2022-40314

fedora — A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 81.7.817 × 2016.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.

Affected

ProductAffectedFixed inSource
moodle4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.redhat.com/show_bug.cgi?id=2128147refmoodle.org/mod/forum/discuss.php?d=438393