VulnerabilityModified
CVE-2004-1425
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a ..
MEDIUM 5.0EPSS 1.82%
Does this matter?
Lower severity and a low EPSS score (1.82%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.82% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- moodle/moodle
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=110425409614735&w=2
- http://marc.info/?l=bugtraq&m=110444531816566&w=2
- http://www.securityfocus.com/bid/12120Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18550
- http://marc.info/?l=bugtraq&m=110425409614735&w=2
- http://marc.info/?l=bugtraq&m=110444531816566&w=2
- http://www.securityfocus.com/bid/12120Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18550
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.