Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-43425

Fixed upstream EPSS 88%CVSS 8.1

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

Published 2024-11-07 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.1.12
Packagistmoodle/moodle4.2.9
Packagistmoodle/moodle4.3.6
Packagistmoodle/moodle4.4.2

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix