Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xjx9-7c29-pwmm

Опубликовано: 13 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Moodle Improper Privilege Management

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

Пакеты

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.1, < 3.1.12

3.1.12

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.2, < 3.2.9

3.2.9

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.3, < 3.3.6

3.3.6

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.4, < 3.4.3

3.4.3

EPSS

Процентиль: 46%
0.00229
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

CVSS3: 6.5
nvd
около 7 лет назад

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

CVSS3: 6.5
debian
около 7 лет назад

An issue was discovered in Moodle 3.x. Students who submitted assignme ...

EPSS

Процентиль: 46%
0.00229
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269