Moodle Improper Access Control Vulnerability - CVE-2016-8642
In Moodle 2.x and 3.x the question engine allows access to files that should not be available.
In Moodle 2.x and 3.x the question engine allows access to files that should not be available.