Moodle 3.x Multiple Vulnerabilities (May 2018) - Windows

Moodle CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

CVE-2018-1135

An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...

CVE-2018-1135

CVE-2018-1135 affects Moodle 3.x: an issue where students posting on forums and exporting posts to portfolios can download any stored Moodle file by altering the download URL. The vulnerability concerns the file download mechanism within Moodle’s portfolio integration (no explicit root cause deta...