VULNERABILITY INTELLIGENCE

CVE-2018-1135

CVSS score6.5 MEDIUM
EPSS probability1.29%
CISA KEVNot currently listed
Published2018-05-25
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references