REDHAT-BUG-2440901
A Remote Code Execution vulnerability exists in Moodle’s file restore functionality due to insufficient validation of backup file contents during the restore process. An authenticated user with restore permissions can upload a specially crafted Moodle backup archive that may trigger execution of arbitrary PHP code when processed by the server. Successful exploitation could result in complete compromise of the Moodle instance, including unauthorized access to data, system modification, or service disruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2440901?
The severity of REDHAT-BUG-2440901 is critical due to its potential for remote code execution.
How do I fix REDHAT-BUG-2440901?
To fix REDHAT-BUG-2440901, update your Moodle installation to the latest version that addresses this vulnerability.
Who is affected by REDHAT-BUG-2440901?
Any authenticated user with restore permissions in Moodle is potentially affected by REDHAT-BUG-2440901.
What does REDHAT-BUG-2440901 exploit?
REDHAT-BUG-2440901 exploits insufficient validation of backup file contents during the file restore process in Moodle.
What can an attacker do with REDHAT-BUG-2440901?
An attacker can upload a specially crafted Moodle backup archive that may allow them to execute arbitrary code.