CVE-2024-34005
May 31, 2024, 9:15 p.m.
None
No Score
Description
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
Product(s) Impacted
| Product | Versions |
|---|---|
| Moodle |
|
Weaknesses
Tags
Date
- Published: May 31, 2024, 9:15 p.m.
- Last Modified: May 31, 2024, 9:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
patrick@puiterwijk.org
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.