Lucene search
GitHub Advisory DatabaseGHSA-Q3CM-CCRM-2MR6HistoryMay 31, 2024 - 9:30 p.m.
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
2024-05-3121:30:55
CWE-200
GitHub Advisory Database
github.com
4
moodle
authenticated
lfi
risk
misconfigured
shared hosting
web server
In a shared hosting environment that has been misconfigured to allow access to other users’ content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
Affected configurations
Node
moodlemoodleRange<4.1.10
ORmoodlemoodleRange4.2.0–4.2.7
ORmoodlemoodleRange4.3.0–4.3.4
Related
cvelist
cvelist
nvd
nvd
CVE-2024-34004
2024-05-31 21:15:09
cve
cve
CVE-2024-34004
2024-05-31 21:15:09
ubuntucve
ubuntucve
CVE-2024-34004
2024-05-31 00:00:00
osv
osv
CVE-2024-34004
2024-05-31 21:15:00
vulnrichment
vulnrichment
openvas
openvas
Moodle < 4.1.10, 4.2.x < 4.2.7, 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00
redos
redos
ROS-20240701-03
2024-07-01 00:00:00