CVE-2013-3630

Published Nov 1, 2013 CVSS 2.0 · 4.6 Medium EPSS 41.7% KEV · Not listed
Description
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-wxqg-fg7v-mmc6 Moodle Authenticated Spelling Binary Remote Code Execution
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
certcc
Published
Updated
Aug 6, 2024, 4:14 PM
Reserved
May 21, 2013, 12:00 AM
Status
Modified
Published
Nov 1, 2013, 2:55 AM
Modified
Jun 16, 2026, 11:55 PM