The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade moodle35Upgrade moodle31Upgrade moodle33Upgrade moodle34 | Sep 19, 2018 | Sep 18, 2018 |
| Moodle | — | Upgrade to the latest version of Moodle | Sep 17, 2018 | Sep 17, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 17, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub