Moodle · Moodle · CVE-2012-4407
**Name of the Vulnerable Software and Affected Versions**
Moodle versions 2.1.x through 2.1.7
Moodle versions 2.2.x through 2.2.4
Moodle versions 2.3.x through 2.3.1
**Description**
The issue allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file, due to improper checking of the publication state of blog files in lib/filelib.php.
**Recommendations**
For Moodle versions 2.1.x through 2.1.7, update to version 2.1.8 or later.
For Moodle versions 2.2.x through 2.2.4, update to version 2.2.5 or later.
For Moodle versions 2.3.x through 2.3.1, update to version 2.3.2 or later.