CVE-2021-20187

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.
References
Link Resource
https://moodle.org/mod/forum/discuss.php?d=417171 Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:3.10.0:*:*:*:*:*:*:*

Information

Published : 2021-01-28 07:15

Updated : 2022-10-21 08:09


NVD link : CVE-2021-20187

Mitre link : CVE-2021-20187

Products Affected
No products.
CWE