Lucene search
Veracode Vulnerability DatabaseVERACODE:4616HistoryJul 20, 2017 - 6:52 a.m.
Bypass Reference Validation
2017-07-2006:52:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.004
Percentile
72.7%
Moodle is vulnerable to bypass reference validation. The function file_save_draft_area_files() at server side does not check permission of file shortcuts/aliases while uploading/saving a file from a draft file to the server. Therefore, any authenticated users can bypass the intended alias restrictions via the client that omits the check.
Related
cvelist
cvelist
CVE-2012-3387
2012-07-23 21:00:00
osv
osv
Moodle Authentication Bypass in File Upload
2022-05-13 01:12:59
cve
cve
CVE-2012-3387
2012-07-23 21:55:04
ubuntucve
ubuntucve
CVE-2012-3387
2012-07-23 00:00:00
prion
prion
Design/Logic Flaw
2012-07-23 21:55:00
nvd
nvd
CVE-2012-3387
2012-07-23 21:55:04
github
github
Moodle Authentication Bypass in File Upload
2022-05-13 01:12:59
nessus
nessus
Moodle 2.3.x < 2.3.1 Multiple Vulnerabilities
2016-07-21 00:00:00
Fedora 16 : moodle-2.0.10-1.fc16 (2012-11028)
2012-08-02 00:00:00
Fedora 17 : moodle-2.2.4-1.fc17 (2012-11039)
2012-08-02 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: moodle-2.2.4-1.fc17
2012-08-01 22:28:41
[SECURITY] Fedora 16 Update: moodle-2.0.10-1.fc16
2012-08-01 22:27:44
openvas
openvas
Fedora Update for moodle FEDORA-2012-11028
2012-08-03 00:00:00
Fedora Update for moodle FEDORA-2012-11039
2012-08-30 00:00:00
Fedora Update for moodle FEDORA-2012-11028
2012-08-03 00:00:00