Description

lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message.

Remediation

References

CVE-2013-1831

Related Vulnerabilities

WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Cross-Site Request Forgery (1.5.26)

Magento Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2019-8126)

WordPress 3.8.x Possible SQL Injection Vulnerability (3.8 - 3.8.22)

Joomla! Core 1.7.0 Cross-Site Scripting (1.7.0)

WordPress Plugin ContentStudio Multiple Vulnerabilities (1.2.5)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2013-1831