CVE-2022-35649: Moodle - Improper Input Validation Remote Code Execution
Summary
CVE-2022-35649: The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. Affects moodle across 3 version ranges.
>= 3.9.0, < 3.9.15
>= 3.11.0, < 3.11.8
>= 4.0.0, < 4.0.2
Fixed in 3.9.15, 3.11.8 or 4.0.2, depending on the release line you run. How to fix ↓
Also tracked for
- moodle/moodle · Packagist
The same CVE-2022-35649 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning management system widely used for creating and managing online courses. It provides a range of features for educators and learners, including course management, content creation, and assessment tools. Moodle is vulnerable to an improper input validation issue when parsing PostScript code. This vulnerability affects sites running GhostScript versions older than 9.50. Exploiting this vulnerability could lead to remote code execution and complete compromise of the affected system.
Vulnerability Detail
The vulnerability in Moodle arises from a lack of proper input validation during the parsing of PostScript code. Specifically, an execution parameter is omitted, which poses a remote code execution risk. This vulnerability impacts Moodle instances running GhostScript versions older than 9.50. Successful exploitation of this vulnerability can result in the complete compromise of the vulnerable system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 3.9.0, < 3.9.153.9.15 -
>= 3.11.0, < 3.11.83.11.8 -
>= 4.0.0, < 4.0.24.0.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is essential to apply the recommended fixes and updates to mitigate the risk of exploitation.
Conclusion
The vulnerability in Moodle, allowing remote code execution through improper input validation, poses a significant risk to affected systems. To mitigate this risk, it is crucial to update GhostScript to version 9.50 or newer and upgrade Moodle to the recommended fixed versions. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for moodle →
FAQ
Moodle is an open-source learning management system used for creating and managing online courses.
Successful exploitation of this vulnerability can result in remote code execution and complete compromise of the affected system.
GhostScript versions older than 9.50 are vulnerable to this issue.
To fix this vulnerability, update GhostScript to version 9.50 or newer and upgrade Moodle to the recommended fixed versions.
No specific workaround is mentioned for this vulnerability. Applying the recommended fixes and updates is the best approach.
Related vulnerabilities
Recent vulnerabilities recorded for moodle.
