MSA-26-0008: Upgrade PHPUnit version to avoid a security risk (upstream)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-04-28 19:06 UTC
Importiert: 2026-06-22 14:40 UTC
CVSS: 7.8
Quelle-ID: moodle
uid_hash: 3c04c07846234c9cb7cceb66437f99a33a67622aabde69a5e72e09a9dc689062

Moodle Security Announcements

by Michael Hawkins.

The PHPUnit version in Moodle LMS 4.5 required updating to avoid an upstream Poisoned Pipeline Execution (PPE) risk.

Severity/Risk: Minor

Versions affected: 4.5 to 4.5.10

Versions fixed: 4.5.11

Reported by: Huong Nguyen

CVE identifier: CVE-2026-24765

Tracker issue: MDL-88381 Upgrade PHPUnit version to avoid a security risk (upstream)

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-24765	HIGH	7.8	HIGH	7.8			2026-01-27

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Moodle Security Announcements	moodle	vendor_advisory	cms	-	de	https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml