CVE-2014-0216

Packagist/moodle/moodle CVE-2014-0216: medium, EPSS 2.12%

Moodle does not properly restrict file access

Action: Upgrade moodle/moodle to 2.4.10 or later.

composer require moodle/moodle:2.4.10

composer require moodle/moodle:2.5.6

composer require moodle/moodle:2.6.3

Affected

Fixed versions

Sources

• osv: GHSA-8rc7-4qfv-4484
• https://nvd.nist.gov/vuln/detail/CVE-2014-0216
• https://github.com/moodle/moodle/commit/40ad22fdd0d9ed569b2ad0ff6ad02814bfa014b8
• https://github.com/moodle/moodle/commit/568514ee7f7e994f61e7a44356fe89d0dd18c157
• https://github.com/moodle/moodle/commit/7b9acc77efe06f7be7070032b05c3159e0a6d415
• https://github.com/moodle/moodle/commit/b04bf988ef47f8fa65dd08ce936ecb774d5d76bd
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=260364
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43877
• http://openwall.com/lists/oss-security/2014/05/19/1

CVE-2014-0216 · published 2022-05-13T01:12:51Z · modified 2024-12-07T05:49:25.468337Z · JSON