Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-3387 - Vulnerability Database
Moodle

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-3387

Medium
Reference: CVE-2012-3387
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-3387
Title: Moodle Permissions Privileges and Access Controls Vulnerability
Overview:

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload which allows remote authenticated users to bypass intended alias (aka shortcut) restrictions via a client that omits this check.