Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2024/05/31 9:30 p.m.•53 views

GHSA-MM9P-XWFM-3FQF Moodle Authenticated LFI risk in some misconfigured shared hosting environments

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

7.1CVSS6.5AI score0.00479EPSS
SaveExploits0References4
Mend
Mend
•added 2024/05/31 8:15 p.m.•11 views

CVE-2024-34002

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

7.1CVSS6.5AI score0.00479EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/31 12:00 a.m.•6 views

CVE-2024-34002: Exposure of Sensitive Information to an Unauthorized Actor

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

6.5CVSS6.5AI score0.00479EPSS
SaveExploits0References1
Rows per page
Query Builder