Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-6099
4
MEDIUMCVSS v2
Published
January 27, 2013
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform= 2.1.2, = 2.1.8, = 2.1.9, = 2.1.1, = 2.1.5, = 2.1.6, = 2.1.3, = 2.1.7, = 2.1.4, = 2.1.0, = 2.2.2, = 2.2.6, = 2.2.1, = 2.2.3, = 2.2.5, = 2.2.4, = 2.2.0, = 2.3.1, = 2.3.3, = 2.3.2, = 2.3.0, = 2.4.0, >= 2.4, < 2.4.1, >= 2.3, < 2.3.4, >= 2.2, < 2.2.7, >= 2.1, < 2.1.10NVD
moodlePython Package IndexMoodle web services connection library
Python Package IndexMoodle web services connection library= 2.1.2, = 2.1.8, = 2.1.9, = 2.1.1, = 2.1.5, = 2.1.6, = 2.1.3, = 2.1.7, = 2.1.4, = 2.1.0, = 2.2.2, = 2.2.6, = 2.2.1, = 2.2.3, = 2.2.5, = 2.2.4, = 2.2.0, = 2.3.1, = 2.3.3, = 2.3.2, = 2.3.0, = 2.4.0NVD