Moodle Allows Unauthenticated Dropbox Access
Moderate severity
GitHub Reviewed
Published
May 13, 2022
to the GitHub Advisory Database
•
Updated Jan 11, 2024
Package
Affected versions
>= 2.3, <= 2.3.2
>= 2.2, <= 2.2.5
>= 2.1, <= 2.1.8
Patched versions
2.3.3
2.2.6
2.1.9
Description
Published by the National Vulnerability Database
Nov 21, 2012
Published to the GitHub Advisory Database
May 13, 2022
Reviewed
Jan 11, 2024
Last updated
Jan 11, 2024
The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout.
References