CVE-2018-1134

—

CVSS 3.0

6.5 medium

EPSS

1%p61

Published

May 25, 2018 (May 25, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

Vendors: moodle
Products: moodle
Weakness: CWE-269
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.