← voltar
CVE-2012-5480

CVE-2012-5480

EPSS 1.6%
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558http://openwall.com/lists/oss-security/2012/11/19/1https://moodle.org/mod/forum/discuss.php?d=216160http://www.securityfocus.com/bid/56505