GitHub Advisoryadvisory · Packagist

GHSA-cr78-rphw-w73p Moodle Arbitrary File Read via Backup Functionality

MEDIUM Published 2022-05-13 Modified 2023-12-29 Official page ↗
Aliases
CVE-2012-6099
Ecosystem
Packagist
Packages
moodle/moodle
Severity
Moderate
Weaknesses
CWE-20
Reviewed
2023-12-29

Affected packages

• Packagist moodle/moodle: >= 2.4, < 2.4.1 → fixed in 2.4.1 • Packagist moodle/moodle: >= 2.3, < 2.3.4 → fixed in 2.3.4 • Packagist moodle/moodle: >= 2.2, < 2.2.7 → fixed in 2.2.7 • Packagist moodle/moodle: >= 2.1, < 2.1.10 → fixed in 2.1.10

Description

The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.

Related

Alias · CVE (1)

  • CVE-2012-6099 The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References