Description

The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.

Remediation

References

CVE-2011-4300

Related Vulnerabilities

WordPress Plugin 10Web Map Builder for Google Maps Security Bypass (1.0.63)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.5)

WordPress Other Vulnerability (CVE-2005-1810)

MySQL CVE-2018-2776 Vulnerability (CVE-2018-2776)

WordPress Plugin Floating Social Bar Cross-Site Scripting (1.1.6)

Severity

Medium

Classification

CVE-2011-4300 CWE-264

Tags

Missing Update Known Vulnerabilities