Not rated
CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker
Description
Moodle 3.x has Server Side Request Forgery in the filepicker.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle 3.x | Versions not published |
References
- moodle.org moodle.org
- 102752 www.securityfocus.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of Moodle 3.x
The 10 CVEs of Moodle 3.x →
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames
Not rated
CVE-2018-1044
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings
Not rated
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name
Not rated
CVE-2017-15110
In Moodle 3.x, students can find out email addresses of other students in the same course
Not rated