Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4389
HistoryJun 07, 2017 - 6:05 a.m.

Arbitrary File Read

2017-06-0706:05:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.001

Percentile

46.1%

Moodle is vulnerable to arbitrary file reads. Authenticated users can read arbitrary files through the backup-restoration feature. This is because the backup/converter/moodle1/lib.php doesn’t correctly validate pathnames.

EPSS

0.001

Percentile

46.1%