The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-07-11 03:26
Updated : 2023-02-12 20:32
NVD link : CVE-2011-4300
Mitre link : CVE-2011-4300
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
moodle
- moodle