Local File Inclusion Vulnerability in Moodle Affecting Block Backups

CVE-2024-43440

What is CVE-2024-43440?

A vulnerability has been identified in the Moodle Learning Platform that allows for potential local file inclusion. This issue arises during the process of restoring block backups, where improper validation may lead to unintended file access. As a result, attackers could leverage this flaw to include sensitive local files, posing a risk to the integrity and confidentiality of user data. Affected users are advised to review their system configurations and implement necessary security measures to mitigate potential exposure.

References