CVE-2012-6099: Moodle Arbitrary File Read via Backup Functionality
Summary
CVE-2012-6099: Moodle Arbitrary File Read via Backup Functionality. Affects moodle/moodle across 4 version ranges.
>= 2.1, < 2.1.10
>= 2.2, < 2.2.7
>= 2.3, < 2.3.4
>= 2.4, < 2.4.1
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning management system (LMS) used for creating and delivering online courses. It provides a wide range of features for educators and learners, including course management, content creation, and assessment tools. Moodle is widely adopted in educational institutions and organizations around the world. However, a vulnerability has been discovered in Moodle's backup functionality that allows remote authenticated users to read arbitrary files.
Vulnerability Detail
The vulnerability exists in the moodle1 backup converter, specifically in the backup/converter/moodle1/lib.php file. This component of Moodle does not properly validate pathnames, which enables remote authenticated users to read any file on the system using the backup-restoration feature. By exploiting this vulnerability, an attacker could gain unauthorized access to sensitive information, such as configuration files, user data, or other confidential data stored on the server.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 2.1, < 2.1.102.1.10composer require moodle/moodle:2.1.10 -
>= 2.2, < 2.2.72.2.7composer require moodle/moodle:2.2.7 -
>= 2.3, < 2.3.42.3.4composer require moodle/moodle:2.3.4 -
>= 2.4, < 2.4.12.4.1composer require moodle/moodle:2.4.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to a patched version of Moodle.
Conclusion
The vulnerability in Moodle's backup functionality allows remote authenticated users to read arbitrary files on the server. To mitigate this risk, it is crucial to upgrade to a patched version of Moodle. Regularly updating Moodle and staying informed about security vulnerabilities is essential to maintain the integrity and security of your Moodle installation. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for moodle/moodle →
FAQ
Moodle is an open-source learning management system (LMS) used for creating and delivering online courses. It provides a wide range of features for educators and learners, including course management, content creation, and assessment tools.
The vulnerability allows remote authenticated users to read arbitrary files on the server, potentially exposing sensitive information stored on the system.
To fix this vulnerability, it is recommended to upgrade to a patched version of Moodle. The following versions have been released to address the issue: 2.4.1, 2.3.4, and 2.1.10. Users are advised to update their Moodle installations to one of these versions or later.
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to a patched version of Moodle.
You can use Vulert's playground (https://vulert.com/scanner) to check if your Moodle installation is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the composer.lock file.
References
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
