PT-2018-10497
CVE-2018-1134
·
تاريخ النشر
2018-05-25
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Moodle versions 3.x
Description
An issue allows students who submitted assignments and exported them to portfolios to download any stored Moodle file by changing the download URL.
Recommendations
For Moodle versions 3.x, update to a version where this issue is fixed, or as a temporary workaround, consider restricting access to the portfolio export feature to prevent unauthorized file downloads.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾