GHSA-cr78-rphw-w73pMedium

Moodle Arbitrary File Read via Backup Functionality

Published
May 13, 2022
Last Modified
December 29, 2023

🔗 CVE IDs covered (1)

CVE-2012-6099 →

📋 Description

The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.

🎯 Affected products4

  • composer/moodle/moodle:= 2.4
  • composer/moodle/moodle:>= 2.3, <= 2.3.3
  • composer/moodle/moodle:>= 2.2, <= 2.2.6
  • composer/moodle/moodle:>= 2.1, <= 2.1.9

🔗 References (7)