CVE-2018-1134: Improper Privilege Management

May 25, 2018 (updated October 3, 2019)

An issue was discovered in Moodle. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

References

www.securityfocus.com/bid/104307
moodle.org/mod/forum/discuss.php?d=371200
nvd.nist.gov/vuln/detail/CVE-2018-1134

Detect and mitigate CVE-2018-1134 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →