CVE-2023-5539

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 9, 2023
Updated: Nov 16, 2023
CWE ID 94

Summary

CVE-2023-5539 represents a remote code execution vulnerability discovered in the Lesson activity of an unspecified software. This issue poses a significant risk due to the potential for unauthorized code execution. By default, this vulnerability was accessible only to teachers and managers, increasing the potential for malicious actors to exploit it for gaining unauthorized access and executing malicious code. The precise cause of this vulnerability and the required steps to remediate it have not been disclosed in the given information. However, it is recommended that affected organizations apply the necessary patches as soon as they become available to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Moodle
  • Fedora Operating System

Affected Vendors

  • Moodle HQ
  • Fedora Project