Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-659w-gh8v-v435

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file.

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file.

EPSS

Процентиль: 51%
0.00283
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
почти 13 лет назад

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file.

nvd
почти 13 лет назад

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file.

debian
почти 13 лет назад

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and ...

EPSS

Процентиль: 51%
0.00283
Низкий

Дефекты

CWE-200