CVE-2022-40314

Description

A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.

Affected packages (2)

• Bitnami/moodle>= 3.9.0, < 3.9.17, >= 3.11.0, < 3.11.10, >= 4.0.0, < 4.0.4
• Packagist/moodle/moodlefrom 0, < 3.9.17

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-40314
• PATCHhttps://github.com/moodle/moodle
• WEBhttp://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75405
• WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=2128147
• WEBhttps://moodle.org/mod/forum/discuss.php?d=438393