CVE-2018-1135

—

CVSS 3.0

6.5 medium

EPSS

1%p66

Published

May 25, 2018 (May 25, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL.

Vendors: moodle
Products: moodle
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.