CVE-2018-1134

Опубликовано: 25 мая 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

Ссылки

http://www.securityfocus.com/bid/104307
Third Party Advisory
VDB Entry
https://moodle.org/mod/forum/discuss.php?d=371200
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104307
Third Party Advisory
VDB Entry
https://moodle.org/mod/forum/discuss.php?d=371200
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.1.0 (включая) до 3.1.11 (включая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.2.0 (включая) до 3.2.8 (включая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.3.0 (включая) до 3.3.5 (включая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.2 (включая)

EPSS

Процентиль: 46%

0.00229

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-269

Связанные уязвимости

CVE-2018-1134

CVSS3: 6.5

ubuntu

около 7 лет назад

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

CVE-2018-1134

CVSS3: 6.5

debian

около 7 лет назад

An issue was discovered in Moodle 3.x. Students who submitted assignme ...

GHSA-xjx9-7c29-pwmm

CVSS3: 6.5

github

около 3 лет назад

Moodle Improper Privilege Management

EPSS

Процентиль: 46%

0.00229

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-269