Moodle Formula Injection Vulnerability Allowing Arbitrary Formula Execution

A formula injection vulnerability has been identified in Moodle. This issue arises when data fields are exported without adequate escaping, enabling remote attackers to inject malicious data. When the exported file is opened in a spreadsheet, the injected formulas can execute, potentially compromising data integrity and leading to unintended actions within the spreadsheet.

Impact

Exploitation of this vulnerability allows for arbitrary formula execution in spreadsheets, which can disrupt data integrity and cause unintended operations.