| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 5.0.0-beta, < 5.0.5≥ 5.1.0-beta, < 5.1.2< 4.5.9 | 5.0.55.1.24.5.9 |
| moodle | ≥ 5.0.0, < 5.0.5≥ 5.1.0, < 5.1.2< 4.5.9 | 5.0.55.1.24.5.9 |
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free