Description
The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-1999-0449)
Internet Information Services Other Vulnerability (CVE-2001-0151)
WordPress Plugin WP Human Resource Management Security Bypass (2.2.14)
WordPress Plugin HandL UTM Grabber Security Bypass (2.6.4)
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9268)