Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4468
HistoryJun 23, 2017 - 3:04 a.m.

Information Disclosure

2017-06-2303:04:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.003

Percentile

70.5%

moodle/moodle is vulnerable to information disclosure attacks. theme/yui_combo.php doesn’t correctly construct errors for the drag-and-drop script. Attackers can use this flaw to obtain the installation path through requests for nonexistent resources.

EPSS

0.003

Percentile

70.5%