EUVD-2022-5508

Malicious code in bioql PyPI...

Design/Logic Flaw

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

CVE-2012-3387

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

CVE-2012-3387

Moodle 2.3.x before 2.3.1 is affected. The root cause is a client-side check only for permitted references during file uploads, allowing remote authenticated users to bypass alias/shortcut restrictions if the client omits this check. The issue is mitigated by upgrading to Moodle 2.3.1 (or applyin...