Vulnerability · Published Oct 30, 2026 · Assigned by VulnCheck
CVE-2026-119553Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal
Medium 6.5
In plain English
A medium-severity security flaw in moodle from Moodle Project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 63.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path traversal vulnerability in the Blackboard question import format. Teachers with question import or lesson edit rights can upload a crafted zip with img src values containing ../ sequences, copying server files like config.php into their draft area.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moodle Project | moodle | 5.3.05.2.0 – through 5.2.45.1.0 – through 5.1.85.0.0 – through 5.0.110 – through 4.5.15 |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://github.com/moodle/moodle/blob/v5.3.0/public/question/format/blackboard_six/formatbase.php#L128-L133 technical-description
- https://abraxaslabs.tech/research/moodle-blackboard-img third-party-advisory
- https://github.com/moodle/moodle product
- VulnCheck Advisory: Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal third-party-advisory