Miembros de
Boletines de Vulnerabilidades |
MSA-22-0016: Arbitrary file read when importing lesson questions |
|
| Software afectado | PHP |
|
by Michael Hawkins. Insufficient path checks in a lesson question import resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.Severity/Risk:SeriousVersions affected:4.0 to 4.0.1, 3.11 to 3.11.7, 3.9 to 3.9.14 and earlier unsupported versionsVersions fixed:4.0.2, 3.11.8 and 3.9.15Reported by:loknopCVE identifier:CVE-2022-35650Changes More info: https://moodle.org/mod/forum/discuss.php?d=436457&parent=1756385 |
|
