Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2014-7848 - Vulnerability Database

Moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2014-7848

Medium

Reference: CVE-2014-7848

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-7848

Title: Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Overview:

lib/phpunit/bootstrap.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allows remote attackers to obtain sensitive information via a direct request which reveals the full path in an error message.