CVE-2022-35650CWE-22

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions

published July 25, 2022

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
54%
Percentile
99.0
In the wild
Unconfirmed
What it is

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature is only available to teachers, managers and admins by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.53652 · 99.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-07-25T15:29Z
EPSS history
Timeline
  • 25 JUL 15:29Z
    The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions
    cvelistv5