VULNERABILITY INTELLIGENCE

CVE-2014-3541

CVSS score7.5 HIGH
EPSS probability3.71%
CISA KEVNot currently listed
Published2014-07-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references