Packagist/moodle/moodle CVE-2016-9187: high 8.8, EPSS 3.97%
Moodle Unrestricted file upload vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.1 | - | 3.2.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-58fm-v4pr-jh8p
- https://nvd.nist.gov/vuln/detail/CVE-2016-9187
- https://github.com/moodle/moodle
- https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html
- http://www.securityfocus.com/bid/94191
CVE-2016-9187 · published · modified · JSON