Information Exposure Through Misconfigured Permissions

2024-06-0707:23:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

moodle

vulnerability

misconfigured permissions

information exposure

software

shared hosting

web server

file include

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Moodle is vulnerable to a Information Exposure Through Misconfigured Permissions. The vulnerability is due to misconfiguration in a shared hosting environment, allowing a user with access to restore feedback modules and direct access to the web server outside of the Moodle webroot to execute a local file include.

CPENameOperatorVersion
moodle/moodlelev4.3.3
moodle/moodlelev4.1.9
moodle/moodlelev4.2.6
moodle/moodlelev4.3.3
moodle/moodlelev4.1.9
moodle/moodlelev4.2.6