Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4381
HistoryJun 06, 2017 - 6:32 a.m.

Upload-size Restriction Bypass

2017-06-0606:32:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

EPSS

0.002

Percentile

55.6%

Moodle is vulnerable to upload-size restriction bypass. Authenticated users can bypass intended upload-size restrictions due to a flaw in repository/repository_ajax.php using a -1 value in the maxbytes field.

EPSS

0.002

Percentile

55.6%