Описание
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | not-affected | 1.8.2-1 |
| edgy | not-affected | 1.6.2-1ubuntu1.1 |
| feisty | not-affected | 1.6.3-2ubuntu1 |
| gutsy | not-affected | 1.8.2-1 |
| hardy | not-affected | 1.8.2-1 |
| intrepid | not-affected | 1.8.2-1 |
| jaunty | not-affected | 1.8.2-1 |
| karmic | not-affected | 1.8.2-1 |
| upstream | released | 1.6.2 |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
Связанные уязвимости
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace dat ...
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.
EPSS
5 Medium
CVSS2