PT-2022-5130 · Moodle+2 · Moodle+2

Paul Holden · Published 2020-11-08 · Updated 2025-05-20 · CVE-2022-40314

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9

Description A remote code execution risk exists when restoring backup files. The issue is related to insecure input validation during the restoration process. Exploitation of this issue may allow a remote attacker to execute arbitrary code by uploading a restored file. This can also lead to an attacker tricking a victim into restoring a website from a tampered backup, resulting in code execution on the target system.

Recommendations For Moodle version 1.9, update to a version that includes a fix for this issue to prevent remote code execution risks when restoring backup files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Code Injection

Weakness Enumeration

CWE-502

CWE-94

Related Identifiers

ALT-PU-2020-3235

ALT-PU-2023-2012

ALT-PU-2023-2057

ALT-PU-2023-5127

BDU:2022-06383

BIT-MOODLE-2022-40314

CVE-2022-40314

GHSA-2HMM-Q272-XMHF

Affected Products

Alt Linux

Moodle

Red Os

References · 17

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-40314 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2022-40314 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06383 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=438393 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-40314 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-40314 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40314 · Security Note
• https://osv.dev/vulnerability/GHSA-2hmm-q272-xmhf · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-moodle-cve-2022-40316-cve-2022-40315-cve-2022-40314-cve-2022-40313-cve-20 · Note
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75405 · Note
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75405 · Note
• https://t.me/cibsecurity/50790 · Telegram Post
• https://t.me/cvenotify/123119 · Telegram Post