File Download Vulnerability in Moodle by Moodle

CVE-2018-1134

Summary

A vulnerability exists in Moodle 3.x that allows students who have submitted assignments and exported them to portfolios to download any stored Moodle file. This is achieved by simply altering the download URL. This type of exploitation poses substantial risks, as it can lead to unauthorized access to sensitive files stored within the platform, potentially compromising user data and privacy.

References