CVE-2015-1493: Moodle directory traversal vulnerability
Summary
CVE-2015-1493: Moodle directory traversal vulnerability. Affects moodle/moodle across 3 version ranges.
< 2.6.8
>= 2.7.0, < 2.7.5
>= 2.8.0, < 2.8.3
Fixed in 2.6.8, 2.7.5 or 2.8.3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning management system (LMS) used by educational institutions to create and deliver online courses. It provides a platform for educators to manage and organize course materials, interact with students, and track their progress. Moodle is written in PHP and relies on various libraries and modules to function effectively.
Vulnerability Detail
The directory traversal vulnerability in Moodle allows remote authenticated users to read arbitrary files by exploiting a flaw in the min_get_slash_argument function in lib/configonlylib.php. By manipulating the 'file' parameter and using '..' (dot dot) sequences, an attacker can traverse directories and access sensitive files, including PHP scripts. This vulnerability poses a moderate risk as it requires authenticated access, but can lead to unauthorized disclosure of sensitive information and potential code execution.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 2.6.82.6.8composer require moodle/moodle:2.6.8 -
>= 2.7.0, < 2.7.52.7.5composer require moodle/moodle:2.7.5 -
>= 2.8.0, < 2.8.32.8.3composer require moodle/moodle:2.8.3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading immediately is not feasible, a temporary workaround can be implemented by disabling access to the affected functionality or by applying access controls to restrict access to sensitive files. However, it is strongly recommended to apply the official patches as soon as possible to fully mitigate the vulnerability.
Conclusion
The directory traversal vulnerability in Moodle can be exploited by authenticated users to read arbitrary files, potentially leading to unauthorized disclosure of sensitive information and code execution. It is crucial to upgrade to the patched versions of Moodle or apply the recommended workarounds to mitigate this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for moodle/moodle →
FAQ
Moodle is an open-source learning management system (LMS) used by educational institutions to create and deliver online courses.
A directory traversal vulnerability allows an attacker to access files outside of the intended directory by manipulating input parameters.
This vulnerability allows authenticated users to read arbitrary files, potentially leading to unauthorized disclosure of sensitive information and code execution.
To fix this vulnerability, upgrade to the patched versions of Moodle as recommended by the vendor.
A temporary workaround is to disable access to the affected functionality or apply access controls to restrict access to sensitive files. However, it is recommended to apply the official patches as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
