Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2016-8642

In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.

VectorNETWORK

PublishedJan 20, 2017, 08:59

Published Bysecalert@redhat.com

Base Score

Score5.3

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)3.1.03.1.3N/A

moodle/moodle(Packagist)3.0.03.0.7N/A

moodle/moodle(Packagist)2.9.02.9.9N/A

moodle/moodle(Packagist)2.8.0N/AN/A

moodle/moodle(Packagist)2.7.02.7.17N/A

CWE-284

Base Score

5.3

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.0

Attack Vector (AV)

NETWORK