Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4727
HistoryJul 27, 2017 - 12:41 a.m.

Bypass File-management Restrictions

2017-07-2700:41:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.001

Percentile

50.6%

Moodle is vulnerable to the bypass of file-management restrictions. Authenticated attackers can bypass the intended file-management restrictions when using web services to perform uploads after the moodle/user:manageownfiles capability has been revoked.