CVE-2024-43425: Moodle Remote Code Execution Vulnerability
Summary
CVE-2024-43425: Moodle Remote Code Execution vulnerability. Affects moodle/moodle across 4 version ranges.
< 4.1.12
>= 4.2.0-beta, < 4.2.9
>= 4.3.0-beta, < 4.3.6
>= 4.4.0-beta, < 4.4.2
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Also tracked for
- moodle · Bitnami
The same CVE-2024-43425 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning platform designed to provide educators, administrators, and learners with a single robust, secure, and integrated system to create personalized learning environments. It supports a variety of activities and resources, enabling collaborative learning experiences. However, Moodle is vulnerable to a remote code execution flaw, particularly in its calculated question types, which can be exploited if an attacker has the capability to add or update questions.
Vulnerability Detail
A flaw was found in Moodle that allows for remote code execution due to insufficient restrictions in calculated question types. This vulnerability arises when users can manipulate question data, potentially leading to unauthorized code execution on the server. The ramifications of this vulnerability are severe, as it could allow attackers to execute arbitrary code, compromise the integrity of the Moodle installation, and access sensitive data.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 4.1.124.1.12composer require moodle/moodle:4.1.12 -
>= 4.2.0-beta, < 4.2.94.2.9composer require moodle/moodle:4.2.9 -
>= 4.3.0-beta, < 4.3.64.3.6composer require moodle/moodle:4.3.6 -
>= 4.4.0-beta, < 4.4.24.4.2composer require moodle/moodle:4.4.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is strongly recommended to update to the fixed versions as soon as possible to mitigate the risk.
Conclusion
The Moodle Remote Code Execution vulnerability (CVE-2024-43425) poses a significant risk to users who can add or update questions within the platform. It is essential to update to the latest patched versions to safeguard against potential exploitation. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for moodle/moodle →
FAQ
CVE-2024-43425 is a remote code execution vulnerability found in Moodle, specifically affecting calculated question types.
An attacker with the capability to add or update questions can exploit this vulnerability to execute arbitrary code on the server.
The consequences include potential unauthorized access to the server, data breaches, and compromise of the Moodle installation.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to use the Vulert playground without signup.
While there are no specific workarounds, it is crucial to prioritize updating to the patched versions to protect against this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
