QwikSec

Security Database

CVE

CWE

Training

CVE-2012-4407

Published: Sep 19, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20120917 Moodle security notifications public

mailing-list

x_refsource_MLIST

http://moodle.org/mod/forum/discuss.php?d=211557

x_refsource_CONFIRM

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34585

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.