Moodle Backup Restore Functionality Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Moodle's backup restore feature due to inadequate validation of backup file contents. This flaw allows authenticated users with restore permissions to upload malicious Moodle backup files that can execute arbitrary PHP code on the server. Successful exploitation could lead to a complete compromise of the Moodle instance, including unauthorized data access, system modifications, or service disruptions.

Impact

Exploitation of this vulnerability could result in full compromise of the Moodle server, allowing unauthorized access to data, system modifications, or disruption of services.