NetSight
IP …
high7.5

CVE-2020-10738

A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions.

Impact

A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. It was possible to create a SCORM package in such a way that when added to a course, it could be interacted with via web services in order to achieve remote code execution.

Affected products

VendorProductAffected versions
MoodleMoodle
from 3.5 before 3.5.12
from 3.6 before 3.6.10
from 3.7 before 3.7.6
from 3.8 before 3.8.3

Weakness classification

CWE-20

References