CVE-2021-20187

HIGH · CVSS 7.2 EPSS 1.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-01-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-20187

Severity

HIGH

CVSS

7.2

EPSS

1.57%

Original NVD Description

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.