writeups.xyz / Playing Dominos with Moodle's Security (1/2)

Submitter : c2a

Date: 21 August 2023

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Arbitrary Folder Creation
• RCE
• Security Code Review

Programs :

• Moodle

Authors :

• Yaniv Nizry (@YNizry)

Link :
https://www.sonarsource.com/blog/playing-dominos-with-moodles-security-1/