Local File Inclusion

2024-06-0708:15:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

moodle

vulnerability

local file inclusion

shared hosting

web server

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

moodle/moodle is vulnerable to Local File Inclusion.The vulnerability is due to a misconfigured shared hosting environment that allows access to other users’ content, permitting a user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include.

CPENameOperatorVersion
moodle/moodlelev4.3.3
moodle/moodlelev4.1.9
moodle/moodlelev4.2.6
moodle/moodlelev4.3.3
moodle/moodlelev4.1.9
moodle/moodlelev4.2.6