QwikSec

Security Database

CVE

CWE

Training

CVE-2022-35649

Published: Jul 25, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Vendor	Product	Versions
n/a	Moodle	affected `Fixed in moodle 4.0.2, moodle 3.11.8, moodle 3.9.15`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2106273

x_refsource_MISC

https://moodle.org/mod/forum/discuss.php?d=436456

x_refsource_MISC

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75044

x_refsource_MISC

FEDORA-2022-81ce74b2dd

vendor-advisory

x_refsource_FEDORA

FEDORA-2022-7e7ce7df2e

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.