Description
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.
Remediation
References
Related Vulnerabilities
TCExam Missing Authorization Vulnerability (CVE-2023-6554)
WordPress Plugin 1 Flash Gallery 'upload.php' Arbitrary File Upload (1.5.7)
SharePoint CVE-2023-28288 Vulnerability (CVE-2023-28288)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5665)
WordPress Plugin OnePress Social Locker Multiple Unspecified Vulnerabilities (4.2.5)