The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote malicious user to perform directory traversal attacks. The capability to access this feature is only available to teachers, managers and admins by default.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
moodle moodle |
||
fedoraproject fedora 35 |
||
fedoraproject fedora 36 |
Vulmon