Total vulnerabilities in the database
The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout.
| Software | From | Fixed in |
|---|---|---|
| moodle / moodle | 2.1.2 | 2.1.2.x |
| moodle / moodle | 2.1.8 | 2.1.8.x |
| moodle / moodle | 2.1.1 | 2.1.1.x |
| moodle / moodle | 2.1.5 | 2.1.5.x |
| moodle / moodle | 2.1.6 | 2.1.6.x |
| moodle / moodle | 2.1.3 | 2.1.3.x |
| moodle / moodle | 2.1.7 | 2.1.7.x |
| moodle / moodle | 2.1.4 | 2.1.4.x |
| moodle / moodle | 2.1.0 | 2.1.0.x |
| moodle / moodle | 2.2.2 | 2.2.2.x |
| moodle / moodle | 2.2.1 | 2.2.1.x |
| moodle / moodle | 2.2.3 | 2.2.3.x |
| moodle / moodle | 2.2.5 | 2.2.5.x |
| moodle / moodle | 2.2.4 | 2.2.4.x |
| moodle / moodle | 2.2.0 | 2.2.0.x |
| moodle / moodle | 2.3.1 | 2.3.1.x |
| moodle / moodle | 2.3.2 | 2.3.2.x |
| moodle / moodle | 2.3.0 | 2.3.0.x |