CVE-2023-5550 (published 2023-11-09T19:38:08.611Z)
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.
Affected products: Vendor: n/a
Product: moodle
Versions: 4.2.3, 4.1.6, 4.0.11, 3.11.17, 3.9.24