VULNERABILITY INTELLIGENCE
CVE-2012-3390
CVSS score3.5 LOW
EPSS probability0.98%
CISA KEVNot currently listed
Published2012-07-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:N/A:N
Description
lib/filelib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly restrict file access after a block has been hidden, which allows remote authenticated users to obtain sensitive information by reading a file that is embedded in a block.