CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.15"},{"introduced":"3.11.0"},{"fixed":"3.11.8"},{"introduced":"4.0.0"},{"fixed":"4.0.2"}]}]

Références

advisory git.moodle.org
advisory bugzilla.redhat.com
advisory moodle.org
web lists.fedoraproject.org
web lists.fedoraproject.org
web nvd.nist.gov