Moodle - Remote Code Execution in Shibboleth Authentication Plugin
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2021-36394. PoCs published by dinhbaouit, lavclash75.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2021-36394, a deserialization vulnerability in Moodle. The PoC demonstrates how to achieve RCE by crafting malicious serialized objects and triggering their deserialization via specific HTTP requests.
Description
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.
Exploits (2)
This repository contains functional exploit code for CVE-2021-36394, a deserialization vulnerability in Moodle. The PoC demonstrates how to achieve RCE by crafting malicious serialized objects and triggering their deserialization via specific HTTP requests.
The repository contains a functional exploit for CVE-2021-36394, a pre-authentication RCE vulnerability in Moodle's Shibboleth authentication module. The exploit leverages deserialization to achieve remote code execution by crafting malicious input in the 'sifirst' parameter.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H