CVE-2016-9187: Moodle Unrestricted File Upload Vulnerability
Summary
CVE-2016-9187: Moodle Unrestricted file upload vulnerability. Affects moodle/moodle versions >= 2.0.1, <= 3.2.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning management system (LMS) used by educational institutions to create and deliver online courses. It provides a range of features for course management, content creation, and collaboration. Moodle is widely adopted and has a large user base. However, a vulnerability has been discovered in Moodle version 3.1.2 that allows remote authenticated users to upload and execute arbitrary code.
Vulnerability Detail
The vulnerability in Moodle 3.1.2 is an unrestricted file upload vulnerability in the double extension support of the 'image' module. This vulnerability enables remote authenticated users to upload files with executable extensions and then access them through unspecified vectors. By exploiting this vulnerability, an attacker can execute arbitrary code on the server, potentially leading to unauthorized access, data leakage, or further compromise of the Moodle instance.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If upgrading to a patched version is not immediately feasible, a temporary workaround is to disable the 'image' module in Moodle. This can be done by accessing the Moodle administration panel, navigating to the module settings, and disabling the 'image' module. However, this workaround may impact the functionality of Moodle and should only be considered as a temporary measure until the system can be upgraded.
Conclusion
The unrestricted file upload vulnerability in Moodle 3.1.2 poses a significant security risk as it allows remote authenticated users to execute arbitrary code. It is crucial to upgrade to a patched version of Moodle or disable the 'image' module as a temporary workaround. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for moodle/moodle →
FAQ
Moodle is an open-source learning management system used by educational institutions for online course management and delivery.
An unrestricted file upload vulnerability allows users to upload files with dangerous extensions, potentially leading to the execution of arbitrary code.
Remote authenticated users can upload files with executable extensions and then access them through unspecified vectors, enabling the execution of arbitrary code.
Exploiting this vulnerability can result in unauthorized access, data leakage, or further compromise of the Moodle instance.
Upgrade to a patched version of Moodle (3.2.2 or later) or temporarily disable the 'image' module until the system can be upgraded.
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
