Description
lib/phpunit/bootstrap.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin post highlights Cross-Site Scripting (2.6)
WordPress Plugin Windows Desktop and iPhone Photo Uploader Arbitrary File Upload (1.8)
Oracle Application Server CVE-2008-1812 Vulnerability (CVE-2008-1812)
WebLogic CVE-2021-2142 Vulnerability (CVE-2021-2142)
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2017-11142)