CVE-2024-34004

2024-05-3121:15:09

CWE-200

[email protected]

web.nvd.nist.gov

shared hosting

misconfigured

moodle

local file include

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In a shared hosting environment that has been misconfigured to allow access to other users’ content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include.