cve/2024/CVE-2024-43425.md

CVE-2024-43425

Description

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/LucianoHanna/rev_shell_detection
• https://github.com/RedTeamPentesting/moodle-rce-calculatedquestions
• https://github.com/Snizi/Moodle-CVE-2024-43425-Exploit
• https://github.com/aayush256-sys/Moodle-authenticated-RCE
• https://github.com/aninfosec/CVE-2024-43425-Poc
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/plzheheplztrying/cve_monitor
• https://github.com/zulloper/cve-poc