Moodle allows attackers to extract archives to arbitrary directories
mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-2267US | medium4.0 | — | ||
mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and ext… | ||||
02
references
External citations — patches, advisories, analysis.
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49087WEB
- http://openwall.com/lists/oss-security/2015/03/16/1WEB
- https://github.com/moodle/moodlePACKAGE
- https://github.com/moodle/moodle/commit/12a8fcb5e45c58ee8267ad0472852c2b80a19878WEB
- https://github.com/moodle/moodle/commit/240e7be7341afa31096fdbf3f242a7966f6237abWEB
- https://github.com/moodle/moodle/commit/4475f1e478370fb97933127ec60e40f39e285da1WEB
- https://github.com/moodle/moodle/commit/76da7e9bc88669eab62f83f04639ba356a0b0c5aWEB
- https://github.com/moodle/moodle/commit/83866c3c2a5b1391317172eea0b4f017c6d142d2WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan