| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.10, < 3.10.1≥ 3.5, < 3.5.16≥ 3.8, < 3.8.7≥ 3.9, < 3.9.4 | 3.10.13.5.163.8.73.9.4 |
| moodle | = 3.10.0≥ 3.8.0, < 3.8.7≥ 3.9.0, < 3.9.4< 3.5.16 | 3.8.73.9.43.5.16 |
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free