GHSA-xjx9-7c29-pwmm

ghsaUSosv

Moodle Improper Privilege Management

view advisory published 2022-05-13Licence: CC-BY-4.0

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-1134US	medium6.5	1.10% (66th)	—	2018-05-25
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

references

External citations — patches, advisories, analysis.

http://www.securityfocus.com/bid/104307WEB
https://github.com/moodle/moodlePACKAGE
https://moodle.org/mod/forum/discuss.php?d=371200WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-1134ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan