Lucene search

K
cvelistRedhatCVELIST:CVE-2012-6099
HistoryJan 27, 2013 - 10:00 p.m.

CVE-2012-6099

2013-01-2722:00:00
redhat
www.cve.org
6
moodle
backup converter
unauthorized access

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

46.1%

The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

46.1%