medium5.0
CVE-2012-4407
lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which all…
Impact
lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | Versions 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34585
- http://moodle.org/mod/forum/discuss.php?d=211557
- http://openwall.com/lists/oss-security/2012/09/17/1
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34585
- http://moodle.org/mod/forum/discuss.php?d=211557
- http://openwall.com/lists/oss-security/2012/09/17/1