Description

The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.

Remediation

References

CVE-2011-4300

Related Vulnerabilities

MySQL CVE-2015-0405 Vulnerability (CVE-2015-0405)

WordPress Plugin Multivendor Marketplace Solution for WooCommerce-WC Marketplace Cross-Site Request Forgery (3.7.3)

Ruby on Rails CVE-2018-16477 Vulnerability (CVE-2018-16477)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2987)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2006-0369)

Severity

Medium

Classification

CVE-2011-4300 CWE-264

Tags

Missing Update Known Vulnerabilities