CVE-2012-1156: vulnerability in Moodle
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.1%
Moodle before 2.2.2 has users' private files included in course backups
Affected products
Moodle · MoodleRelated CVEs — Moodle
In the same product, most dangerous first.
References
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlhttps://access.redhat.com/security/cve/cve-2012-1156https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1156https://moodle.org/mod/forum/discuss.php?d=198623https://security-tracker.debian.org/tracker/CVE-2012-1156