System	Score	Found at
cvssv2		https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2018-1042.yml
cvssv3		https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2018-1042.yml

Reference id	Reference type	URL
		https://moodle.org/mod/forum/discuss.php?d=364381
		http://www.securityfocus.com/bid/102752
CVE-2018-1042		https://nvd.nist.gov/vuln/detail/CVE-2018-1042

Data source	Exploit-DB
Date added	July 26, 2019
Description	Moodle Filepicker 3.5.2 - Server Side Request Forgery
Ransomware campaign use	Unknown
Source publication date	July 26, 2019
Exploit type	webapps
Platform	php
Source update date	July 26, 2019

No EPSS data available for this advisory.

Patch URL
There are no known patches.

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N Found at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2018-1042.yml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2018-1042.yml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

There are no SSVC decisions available.