Non notée
CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker
Description
Moodle 3.x has Server Side Request Forgery in the filepicker.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Moodle 3.x | Versions non publiées |
Références
- moodle.org moodle.org
- 102752 www.securityfocus.com
- packetstormsecurity.com packetstormsecurity.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Moodle 3.x
Les 10 CVE de Moodle 3.x →
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames
Non notée
CVE-2018-1044
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings
Non notée
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name
Non notée
CVE-2017-15110
In Moodle 3.x, students can find out email addresses of other students in the same course
Non notée