Loading HuntDB...

GHSA-2hmm-q272-xmhf

GitHub Security Advisory

Moodle remote code execution

✓ GitHub Reviewed CRITICAL Has CVE

Advisory Details

A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.

Affected Packages

Packagist moodle/moodle
Affected versions: 0 (fixed in 3.9.17)
Packagist moodle/moodle
Affected versions: 3.11 (fixed in 3.11.10)
Packagist moodle/moodle
Affected versions: 4.0 (fixed in 4.0.4)

Related CVEs

Key Information

GHSA ID
GHSA-2hmm-q272-xmhf
Published
October 1, 2022 12:00 AM
Last Modified
April 23, 2024 11:43 PM
CVSS Score
9.0 /10
Primary Ecosystem
Packagist
Primary Package
moodle/moodle
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 31, 2025 6:36 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.