CVE-2021-20187CWE-94

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP…

published January 28, 2021

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01572 · 75.2th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2021-01-28T18:30Z
EPSS history
Timeline
  • 28 JAN 18:30Z
    It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP…
    cvelistv5