CVE-2023-5550
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who a
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.
MEDIUM · CVSS 6.5
EPSS 0.01474
Schedule remediation
- SSVC automatable: yes - attacks can be scripted at scale
Sigma rules0
YARA rules0