Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Improper Input Validation Vulnerability - CVE-2022-35650 - Vulnerability Database
Moodle

Moodle Improper Input Validation Vulnerability - CVE-2022-35650

High
Reference: CVE-2022-35650
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-35650
Title: Moodle Improper Input Validation Vulnerability
Overview:

The vulnerability was found in Moodle occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature is only available to teachers managers and admins by default.