MSA-26-0004: Update Symfony process module version to avoid a security risk (upstream)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-02-17 10:33 UTC
Importiert: 2026-06-22 13:30 UTC
CVSS: 0.0
Quelle-ID: moodle
uid_hash: 76d192d329b97bdae45b4a451ebd87c12b2578a8d0d13d7aa46e42fd0b4949fc

Moodle Security Announcements

by Michael Hawkins.

The upstream Symfony process module version required updating to remove a command injection risk on Windows systems.

Severity/Risk: Serious

Versions affected: 4.5 to 4.5.8

Versions fixed: 4.5.9

Reported by: Dustin Frank

CVE identifier: CVE-2024-51736

Tracker issue: MDL-87594 Update Symfony process module version to avoid a security risk (upstream)

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2024-51736	LOW	0	LOW	0			2024-11-06

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Moodle Security Announcements	moodle	vendor_advisory	cms	-	de	https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml