Lucene search
GoogleOSV:GHSA-VXMV-74RF-VQGPHistoryMay 14, 2022 - 3:16 a.m.
Moodle Portfolio forum caller class allows a user to download any file
2022-05-1403:16:24
Google
osv.dev
7
moodle
portfolio
forum
caller
class
download
file
issue
discovered
students
forums
exported
posts
portfolios
url
software
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL.
Related
ubuntucve
ubuntucve
CVE-2018-1135
2018-05-25 00:00:00
cve
cve
CVE-2018-1135
2018-05-25 12:29:00
cvelist
cvelist
CVE-2018-1135
2018-05-25 12:00:00
github
github
Moodle Portfolio forum caller class allows a user to download any file
2022-05-14 03:16:24
prion
prion
Code injection
2018-05-25 12:29:00
veracode
veracode
Unauthorised Arbitrary File Downloads
2018-05-28 01:46:01
nvd
nvd
CVE-2018-1135
2018-05-25 12:29:00
osv
osv
CVE-2018-1135
2018-05-25 12:29:00
openvas
openvas
Moodle 3.x Multiple Vulnerabilities (May 2018) - Linux
2018-05-29 00:00:00
Moodle 3.x Multiple Vulnerabilities (May 2018) - Windows
2018-05-29 00:00:00