CVE-2024-43440

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 7, 2024
Updated: Nov 8, 2024
CWE ID 22

Summary

CVE-2024-43440 is a newly identified vulnerability in Moodle, an open-source learning platform. This issue allows a local file inclusion risk when restoring block backups. Malicious actors can potentially exploit this vulnerability to gain unauthorized access to sensitive data or execute arbitrary code on the affected system. It is essential that Moodle administrators apply the necessary patches to mitigate this risk and protect their environments from potential attacks. Users are advised to keep their Moodle installations updated to the latest version to minimize exposure to this and other known vulnerabilities.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share