CVE-2018-14630

State: Published
Severity: 8.8 High
Published: Sep 17, 2018
Updated: Aug 5, 2024
Reserved: Jul 27, 2018

Description

moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	redhat

Weaknesses

CWE-20

Affected Products

Product	Versions
moodle[UNKNOWN]	3.5.2Affected 3.4.5Affected 3.3.8Affected 3.1.14Affected

References

105354vdb-entry
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-62880
https://moodle.org/mod/forum/discuss.php?d=376023
20180918 SEC Consult SA-20180918-0 :: Remote Code Execution via PHP unserialize in Moodle open-source learning platformmailing-list
https://www.sec-consult.com/en/blog/advisories/remote-code-execution-php-unserialize-moodle-open-source-learning-platform-cve-2018-14630/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14630

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.