Lucene search
Veracode Vulnerability DatabaseVERACODE:37345HistorySep 30, 2022 - 3:44 a.m.
Information Disclosure
2022-09-3003:44:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
22.7%
moodle/moodle is vulnerable to information disclosure.The vulnerability exits in action_redir.php due to improper access control which allows an attacker to gain access to information in the file system via insufficient capability checks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v3.11.2 | |
| moodle/moodle | le | v3.9.9 | |
| moodle/moodle | le | v3.10.6 | |
| moodle/moodle | le | v3.11.2 | |
| moodle/moodle | le | v3.9.9 | |
| moodle/moodle | le | v3.10.6 |
References
bugzilla.redhat.com/show_bug.cgi?id=2043414
github.com/advisories/GHSA-wr6q-xv23-rfq9
github.com/moodle/moodle/commit/1dfb62cbabe31031453c47ae0a1753f1a57ee695
github.com/moodle/moodle/commit/a937101b0680340276ff50cbc40910dccfc806ab
github.com/moodle/moodle/commit/e09e5f427b8c5713c0b06ded2f7122c112a35f82
github.com/moodle/moodle/commit/ec4c5a0e352facc49e2c70d56a6a814af4ab28f6
Related
github
github
Moodle Incorrect Authorization
2022-09-30 00:00:30
cve
cve
CVE-2021-40692
2022-09-29 03:15:14
prion
prion
Design/Logic Flaw
2022-09-29 03:15:00
osv
osv
BIT-moodle-2021-40692
2024-03-06 11:07:34
CVE-2021-40692
2022-09-29 03:15:14
Moodle Incorrect Authorization
2022-09-30 00:00:30
nvd
nvd
CVE-2021-40692
2022-09-29 03:15:14
ubuntucve
ubuntucve
CVE-2021-40692
2022-09-29 00:00:00
cvelist
cvelist
CVE-2021-40692
2022-01-21 18:17:47
nessus
nessus
Moodle 3.10.x < 3.10.7 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.10 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.11.x < 3.11.3 Multiple Vulnerabilities
2023-02-20 00:00:00
openvas
openvas
Moodle Session Hijack Vulnerability (MSA-21-0032)
2023-08-16 00:00:00