lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-5846 | lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message. |
Github GHSA |
GHSA-xr24-jp5c-6c4v | Moodle reveals absolute path in exception message |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T15:13:33.271Z
Reserved: 2013-02-19T00:00:00
Link: CVE-2013-1831
No data.
Status : Deferred
Published: 2013-03-25T21:55:02.740
Modified: 2025-04-11T00:51:21.963
Link: CVE-2013-1831
No data.
OpenCVE Enrichment
No data.
EUVD
Github GHSA