CVE-2018-1135: Moodle Portfolio forum caller class allows a user to download any file
Summary
CVE-2018-1135: Moodle Portfolio forum caller class allows a user to download any file. Affects moodle/moodle across 4 version ranges.
>= 3.1, < 3.1.12
>= 3.2, < 3.2.9
>= 3.3, < 3.3.6
>= 3.4, < 3.4.3
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Moodle is an open-source learning management system (LMS) used by educational institutions to create and manage online courses. It provides various features such as forums for students to engage in discussions. The Moodle Portfolio forum caller class is responsible for exporting forum posts to portfolios. However, a vulnerability in Moodle 3.x allows students to download any stored Moodle file by manipulating the download URL.
Vulnerability Detail
The vulnerability (CVE-2018-1135) in Moodle 3.x allows students who have posted on forums and exported the posts to portfolios to download any file stored in Moodle. By changing the download URL, students can bypass access restrictions and retrieve files that they should not have access to. This can lead to unauthorized access to sensitive information or intellectual property stored within the Moodle system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 3.1, < 3.1.123.1.12composer require moodle/moodle:3.1.12 -
>= 3.2, < 3.2.93.2.9composer require moodle/moodle:3.2.9 -
>= 3.3, < 3.3.63.3.6composer require moodle/moodle:3.3.6 -
>= 3.4, < 3.4.33.4.3composer require moodle/moodle:3.4.3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is essential to apply the recommended patches or upgrade to the fixed versions of Moodle to mitigate the risk of unauthorized file downloads.
Conclusion
The vulnerability in Moodle 3.x allows students to download any file stored in Moodle by manipulating the download URL. To mitigate this risk, it is crucial to upgrade to the patched versions of Moodle or apply the recommended patches. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for moodle/moodle →
FAQ
Moodle is an open-source learning management system (LMS) used by educational institutions to create and manage online courses.
The Moodle Portfolio forum caller class is responsible for exporting forum posts to portfolios, allowing students to showcase their work and achievements.
The vulnerability allows students to download any file stored in Moodle by manipulating the download URL. This can lead to unauthorized access to sensitive information or intellectual property.
The vulnerability can be fixed by upgrading to the patched versions of Moodle: 3.1.12, 3.2.9, 3.3.6, or 3.4.3.
There is no specific workaround provided. It is recommended to apply the patches or upgrade to the fixed versions of Moodle.
Related vulnerabilities
Recent vulnerabilities recorded for moodle/moodle.
