CVE-2023-30943 — Moodle: tinymce loaders susceptible to arbitrary folder creation
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a special…
Published: 2023-05-02 · CVSS: 6.5 · CVSS 3.1
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7