Lucene search

K
osvGoogleOSV:CVE-2021-21809
HistoryJun 23, 2021 - 10:15 p.m.

CVE-2021-21809

2021-06-2322:15:08
Google
osv.dev
14
command execution
legacy spellchecker plugin
http requests
administrator privileges
software

AI Score

6.9

Confidence

Low

EPSS

0.052

Percentile

93.1%

A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.