Description Moodle 3.x has Server Side Request Forgery in the filepicker. Remediation References CVE-2018-1042 Related Vulnerabilities Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-0217) WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Disclosure (1.0.4) WordPress 4.4.x PHP Object Injection (4.4 - 4.4.24) WordPress Plugin Sitemap Index Cross-Site Scripting (1.2.3) Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9775) Severity Medium Classification CVE-2018-1042 CWE-918 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities