CVE-2011-4300 | BDVDB-2026-50878 Detail

Description#

The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f6b07c4da54a9db24723beb147e8a19a3d487e00
http://moodle.org/mod/forum/discuss.php?d=188311
https://bugzilla.redhat.com/show_bug.cgi?id=747444

Exploit#

No public exploit known

History#

Version 12012-07-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.