Description

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

Remediation

References

CVE-2018-1134

Related Vulnerabilities

OpenSSL Key Management Errors Vulnerability (CVE-2016-7055)

TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23066)

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.2)

Magento Improper Access Control Vulnerability (CVE-2021-21020)

Oracle Database Server CVE-2006-0258 Vulnerability (CVE-2006-0258)

Severity

Medium

Classification

CVE-2018-1134 CWE-269 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities