CVE-2015-2267
mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.
| Software | From | Fixed in |
|---|---|---|
moodle / moodle
|
2.7.1 | 2.7.1.x |
|
moodle / moodle
|
2.5.1 | 2.5.1.x |
|
moodle / moodle
|
2.8.3 | 2.8.3.x |
|
moodle / moodle
|
2.5.3 | 2.5.3.x |
|
moodle / moodle
|
2.5.7 | 2.5.7.x |
|
moodle / moodle
|
2.7.2 | 2.7.2.x |
|
moodle / moodle
|
2.6.7 | 2.6.7.x |
|
moodle / moodle
|
2.7.4 | 2.7.4.x |
|
moodle / moodle
|
2.5.5 | 2.5.5.x |
|
moodle / moodle
|
2.6.1 | 2.6.1.x |
|
moodle / moodle
|
2.5.2 | 2.5.2.x |
|
moodle / moodle
|
2.5.8 | 2.5.8.x |
|
moodle / moodle
|
2.5.6 | 2.5.6.x |
|
moodle / moodle
|
- | 2.5.9.x |
|
moodle / moodle
|
2.6.5 | 2.6.5.x |
|
moodle / moodle
|
2.7.5 | 2.7.5.x |
|
moodle / moodle
|
2.7.3 | 2.7.3.x |
|
moodle / moodle
|
2.6.2 | 2.6.2.x |
|
moodle / moodle
|
2.7.0 | 2.7.0.x |
|
moodle / moodle
|
2.6.8 | 2.6.8.x |
|
moodle / moodle
|
2.8.1 | 2.8.1.x |
|
moodle / moodle
|
2.6.4 | 2.6.4.x |
|
moodle / moodle
|
2.5.4 | 2.5.4.x |
|
moodle / moodle
|
2.6.3 | 2.6.3.x |
|
moodle / moodle
|
2.6.6 | 2.6.6.x |
|
moodle / moodle
|
2.8.2 | 2.8.2.x |
|
moodle / moodle
|
2.5.0 | 2.5.0.x |
|
moodle / moodle
|
2.6.0 | 2.6.0.x |
|
moodle / moodle
|
2.8.0 | 2.8.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime