CVE-2018-1135

🗓️ 25 May 2018 12:00:29Reported by [email protected]Type

Moodle 3.x forum post download vulnerability

Reporter	Title	Published	Views	Family All 10
Cvelist	CVE-2018-1135	25 May 201812:00	–	cvelist
UbuntuCve	CVE-2018-1135	25 May 201800:00	–	ubuntucve
CVE	CVE-2018-1135	25 May 201812:29	–	cve
Veracode	Unauthorised Arbitrary File Downloads	28 May 201801:46	–	veracode
Prion	Code injection	25 May 201812:29	–	prion
OSV	Moodle Portfolio forum caller class allows a user to download any file	14 May 202203:16	–	osv
OSV	CVE-2018-1135	25 May 201812:29	–	osv
Github Security Blog	Moodle Portfolio forum caller class allows a user to download any file	14 May 202203:16	–	github
OpenVAS	Moodle 3.x Multiple Vulnerabilities (May 2018) - Linux	29 May 201800:00	–	openvas
OpenVAS	Moodle 3.x Multiple Vulnerabilities (May 2018) - Windows	29 May 201800:00	–	openvas

Nvd

Node

moodle moodleRange3.1.0–3.1.11

moodle moodleRange3.2.0–3.2.8

moodle moodleRange3.3.0–3.3.5

moodle moodleRange3.4.0–3.4.2

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php
securityfocus	www.securityfocus.com/bid/104307

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 May 2018 12:29Current

6.3Medium risk

Vulners AI Score6.3

CVSS24

CVSS36.5

EPSS0.00059

CWE-200