Home > Vulnerability Database > CVE-2014-3541

WhiteSource Vulnerability Database

CVE-2014-3541

Good to know:

Date: July 29, 2014

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

Language: PHP

Severity Score

7.5

Related Resources (5)

Url: https://moodle.org/mod/forum/discuss.php?d=264262

Url: https://nvd.nist.gov/vuln/detail/CVE-2014-3541

Url: http://openwall.com/lists/oss-security/2014/07/21/1

Url: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45616

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2014-3541

Severity Score

7.5

Weakness Type (CWE)

Code Injection

CWE-94

Top Fix

Upgrade Version

Upgrade to version 2.4.11,2.5.7,2.6.4,2.7.1

Learn More

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2014-3541

Good to know:

Date: July 29, 2014

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?