CVE-2020-10738

A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. It was possible to create a SCORM package in such a way that when added to a course, it could be interacted with via web services in order to achieve remote code execution.

• CWE-20
• CWE-20

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-68410Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10738Issue Tracking, Patch, Third Party Advisory
• https://moodle.org/mod/forum/discuss.php?d=403513Patch, Vendor Advisory
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-68410Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10738Issue Tracking, Patch, Third Party Advisory
• https://moodle.org/mod/forum/discuss.php?d=403513Patch, Vendor Advisory

Published

May 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10732A flaw was found in the Linux kernel's implementation of Use…4.4
• CVE-2020-10733The Windows installer for PostgreSQL 9.5 - 12 invokes system…7.3
• CVE-2020-10734A vulnerability was found in keycloak in the way that the OI…3.3
• CVE-2020-10735A flaw was found in python. In algorithms with quadratic tim…7.5
• CVE-2020-10736An authorization bypass vulnerability was found in Ceph vers…8
• CVE-2020-10737A race condition was found in the mkhomedir tool shipped wit…6.3
• CVE-2020-10739Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contai…7.5
• CVE-2020-1074<p>A remote code execution vulnerability exists when the Win…7.8
• CVE-2020-10740A vulnerability was found in Wildfly in versions before 20.0…7.5
• CVE-2020-10741Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10742A flaw was found in the Linux kernel. An index buffer overfl…6
• CVE-2020-10743It was discovered that OpenShift Container Platform's (OCP) …4.3