Authenticated remote code execution risk in imscp
CVE-2023-5540
8.8HIGH
What is CVE-2023-5540?
A remote code execution vulnerability exists in the IMSCP activity of Moodle, which may be exploited due to insufficient access controls. Under default settings, this vulnerability primarily affects teachers and managers, potentially allowing unauthorized code execution under certain conditions. Users of Moodle are encouraged to update to the latest versions as soon as patches become available to mitigate this security risk.
Affected Version(s)
moodle 4.2.3
moodle 4.1.6
moodle 4.0.11
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.