VulnerableCode Advisory Details - GHSA-w66h-c2vj-cm7f

Staging Environment: Content and features may be unstable or change without notice.

Advisory details: github_osv / GHSA-w66h-c2vj-cm7f

Essentials
Severities (1)
References (8)
Exploits (0)
EPSS
Severity details (0)
Patches: (0)

Advisory ID	github_osv/GHSA-w66h-c2vj-cm7f
Aliases	CVE-2012-3387
Summary	Moodle Authentication Bypass in File Upload Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias (aka shortcut) restrictions via a client that omits this check.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details

Weaknesses (1)

CWE-287

Improper Authentication

System	Score	Found at
generic_textual	MODERATE

Reference id	Reference type	URL
		http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33948
		http://openwall.com/lists/oss-security/2012/07/17/1
		https://exchange.xforce.ibmcloud.com/vulnerabilities/76954
		https://github.com/moodle/moodle
		https://github.com/moodle/moodle/commit/3b6629c088f14c6ee8f13a009ff27441d164f334
		https://github.com/moodle/moodle/commit/61a339e59857fd36080f4a468a16cd6a539d90bb
		https://web.archive.org/web/20121104220059/http://www.securityfocus.com/bid/54481
CVE-2012-3387		https://nvd.nist.gov/vuln/detail/CVE-2012-3387

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.