CVE-2015-3181

Packagist/moodle/moodle CVE-2015-3181: medium, EPSS 1.70%

Moodle allows attackers to bypass file-management restrictions

Action: Upgrade moodle/moodle to 2.6.11 or later.

composer require moodle/moodle:2.6.11

composer require moodle/moodle:2.7.8

composer require moodle/moodle:2.8.6

Affected

Fixed versions

Sources

• osv: GHSA-622h-cjgg-5mx6
• https://nvd.nist.gov/vuln/detail/CVE-2015-3181
• https://github.com/moodle/moodle/commit/350397da93c557f577e7d62e7fc3e233792ad171
• https://github.com/moodle/moodle/commit/4b6b64685affa66784fd238c1bbc1eb0651492a0
• https://github.com/moodle/moodle/commit/57d9a750e3da6708dba13513e9b05e84a895ad9f
• https://github.com/moodle/moodle/commit/8e8ee7530427a10e409386657484e9fd5effc438
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=313688
• https://web.archive.org/web/20200228054133/http://www.securityfocus.com/bid/74728
• https://web.archive.org/web/20201030042703/http://www.securitytracker.com/id/1032358
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49994
• http://openwall.com/lists/oss-security/2015/05/18/1

CVE-2015-3181 · published 2022-05-13T01:12:46Z · modified 2024-12-08T05:31:47.660925Z · JSON