Moodle TeX Filter Command Injection Vulnerability

A command injection vulnerability has been identified in the TeX filter administrative settings of Moodle. This issue arises from inadequate input sanitization of configuration values, which could allow an administrator to execute arbitrary system commands. The vulnerability is present on sites where the TeX filter is active and ImageMagick is installed. Exploitation of this vulnerability could lead to a complete compromise of the Moodle server, including unauthorized access to data and disruption of services.

Impact

Successful exploitation allows an administrator to execute arbitrary operating system commands, potentially leading to unauthorized access to data, modification of files, and disruption of services. Activities may be masked as originating from the application or its owner.