Description

The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.

Remediation

References

CVE-2011-4300

Related Vulnerabilities

Atlassian Jira Other Vulnerability (CVE-2019-20101)

MySQL CVE-2019-2802 Vulnerability (CVE-2019-2802)

WordPress Plugin Simple Ads Manager Multiple Vulnerabilities (2.6.96)

WordPress Plugin Flexible Checkout Fields for WooCommerce Security Bypass (2.3.1)

Joomla! Core 3.6.0 Cross-Site Request Forgery (3.6.0)

Severity

Medium

Classification

CVE-2011-4300 CWE-264

Tags

Missing Update Known Vulnerabilities