EUVD-2022-5508

Malicious code in bioql PyPI...

Design/Logic Flaw

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

CVE-2012-3387

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

CVE-2012-3387

Moodle 2.3.x before 2.3.1 is affected. The root cause is a client-side check only for permitted references during file uploads, allowing remote authenticated users to bypass alias/shortcut restrictions if the client omits this check. The issue is mitigated by upgrading to Moodle 2.3.1 (or applyin...

PT-2012-4680

Name of the Vulnerable Software and Affected Versions Moodle versions 2.3.x through 2.3.0 Description The issue allows remote authenticated users to bypass intended alias restrictions in file uploads by using a client that omits the client-side check. Recommendations For Moodle versions 2.3.x...